CVE-2026-54478 | NLnet Labs Unbound up to 1.25.1 Server Cookie siphash authentication replay

July 22, 2026 Yanac

A vulnerability, which was classified as critical, has been found in NLnet Labs Unbound up to 1.25.1. Affected by this vulnerability is the function siphash of the component Server Cookie. This manipulation causes authentication bypass by capture-replay.

This vulnerability is tracked as CVE-2026-54478. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More