Vulnerability-Lookup

CVE-2026-55708 (GCVE-0-2026-55708)

Vulnerability from cvelistv5 – Published: 2026-07-22 13:09 – Updated: 2026-07-22 14:10

Title

Privacy/configuration issue when adding local data in views through 'unbound-control'

Summary

In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the control interface omits adding the default-protected zones (e.g., RFC 1918 reverse, AS112 zones, .onion, .localhost). Once the local zone tree exists without the defaults, every query for a default-protected name from a client mapped to that view escapes to the public DNS via the iterator instead of being answered locally, bypassing local policy expectations.

Severity

3.1 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-1188 - Initialization of a Resource with an Insecure Default

Assigner

NLnet Labs

References

1 reference

URL	Tags
https://www.nlnetlabs.nl/downloads/unbound/CVE-20…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
NLnet Labs	Unbound	Affected: 1.6.0 , < 1.25.2 (semver)

Date Public

2026-07-22 00:00

Credits

Qifan Zhang (Palo Alto Networks)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-55708",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T14:09:14.145226Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T14:10:36.937Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Unbound",
          "vendor": "NLnet Labs",
          "versions": [
            {
              "lessThan": "1.25.2",
              "status": "affected",
              "version": "1.6.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Qifan Zhang (Palo Alto Networks)"
        }
      ],
      "datePublic": "2026-07-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the \u0027view_local_data\u0027 and \u0027view_local_datas\u0027 commands of \u0027unbound-control\u0027 create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the control interface omits adding the default-protected zones (e.g., RFC 1918 reverse, AS112 zones, .onion, .localhost). Once the local zone tree exists without the defaults, every query for a default-protected name from a client mapped to that view escapes to the public DNS via the iterator instead of being answered locally, bypassing local policy expectations."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1188",
              "description": "CWE-1188: Initialization of a Resource with an Insecure Default",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T13:09:30.500Z",
        "orgId": "206fc3a0-e175-490b-9eaa-a5738056c9f6",
        "shortName": "NLnet Labs"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-55708.txt"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "This issue is fixed starting with version 1.25.2"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-09T00:00:00.000Z",
          "value": "Issue reported by Qifan Zhang"
        },
        {
          "lang": "en",
          "time": "2026-06-08T00:00:00.000Z",
          "value": "NLnet Labs shares patch"
        },
        {
          "lang": "en",
          "time": "2026-06-11T00:00:00.000Z",
          "value": "Qifan Zhang verifies patch"
        },
        {
          "lang": "en",
          "time": "2026-07-22T00:00:00.000Z",
          "value": "Fixes released with version 1.25.2"
        }
      ],
      "title": "Privacy/configuration issue when adding local data in views through \u0027unbound-control\u0027",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "206fc3a0-e175-490b-9eaa-a5738056c9f6",
    "assignerShortName": "NLnet Labs",
    "cveId": "CVE-2026-55708",
    "datePublished": "2026-07-22T13:09:30.500Z",
    "dateReserved": "2026-06-22T12:27:22.800Z",
    "dateUpdated": "2026-07-22T14:10:36.937Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "microsoft_vex": {
      "current_release_date": "2026-07-23T01:03:36.000Z",
      "cve": "CVE-2026-55708",
      "id": "msrc_CVE-2026-55708",
      "initial_release_date": "2026-07-23T01:03:36.000Z",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "Privacy/configuration issue when adding local data in views through \u0027unbound-control\u0027",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-55708.json",
      "version": "1"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-55708\",\"sourceIdentifier\":\"sep@nlnetlabs.nl\",\"published\":\"2026-07-22T14:17:21.403\",\"lastModified\":\"2026-07-22T20:33:11.590\",\"vulnStatus\":\"Undergoing Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the \u0027view_local_data\u0027 and \u0027view_local_datas\u0027 commands of \u0027unbound-control\u0027 create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the control interface omits adding the default-protected zones (e.g., RFC 1918 reverse, AS112 zones, .onion, .localhost). Once the local zone tree exists without the defaults, every query for a default-protected name from a client mapped to that view escapes to the public DNS via the iterator instead of being answered locally, bypassing local policy expectations.\"}],\"affected\":[{\"source\":\"sep@nlnetlabs.nl\",\"affectedData\":[{\"vendor\":\"NLnet Labs\",\"product\":\"Unbound\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"1.6.0\",\"lessThan\":\"1.25.2\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"sep@nlnetlabs.nl\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N\",\"baseScore\":3.1,\"baseSeverity\":\"LOW\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.6,\"impactScore\":2.5}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-22T14:09:14.145226Z\",\"id\":\"CVE-2026-55708\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"sep@nlnetlabs.nl\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1188\"}]}],\"references\":[{\"url\":\"https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-55708.txt\",\"source\":\"sep@nlnetlabs.nl\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-55708\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-22T14:09:14.145226Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-22T14:10:27.732Z\"}}], \"cna\": {\"title\": \"Privacy/configuration issue when adding local data in views through \u0027unbound-control\u0027\", \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Qifan Zhang (Palo Alto Networks)\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 3.1, \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"NLnet Labs\", \"product\": \"Unbound\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.6.0\", \"lessThan\": \"1.25.2\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-09T00:00:00.000Z\", \"value\": \"Issue reported by Qifan Zhang\"}, {\"lang\": \"en\", \"time\": \"2026-06-08T00:00:00.000Z\", \"value\": \"NLnet Labs shares patch\"}, {\"lang\": \"en\", \"time\": \"2026-06-11T00:00:00.000Z\", \"value\": \"Qifan Zhang verifies patch\"}, {\"lang\": \"en\", \"time\": \"2026-07-22T00:00:00.000Z\", \"value\": \"Fixes released with version 1.25.2\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"This issue is fixed starting with version 1.25.2\"}], \"datePublic\": \"2026-07-22T00:00:00.000Z\", \"references\": [{\"url\": \"https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-55708.txt\", \"tags\": [\"vendor-advisory\"]}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the \u0027view_local_data\u0027 and \u0027view_local_datas\u0027 commands of \u0027unbound-control\u0027 create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the control interface omits adding the default-protected zones (e.g., RFC 1918 reverse, AS112 zones, .onion, .localhost). Once the local zone tree exists without the defaults, every query for a default-protected name from a client mapped to that view escapes to the public DNS via the iterator instead of being answered locally, bypassing local policy expectations.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1188\", \"description\": \"CWE-1188: Initialization of a Resource with an Insecure Default\"}]}], \"providerMetadata\": {\"orgId\": \"206fc3a0-e175-490b-9eaa-a5738056c9f6\", \"shortName\": \"NLnet Labs\", \"dateUpdated\": \"2026-07-22T13:09:30.500Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-55708\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-22T14:10:36.937Z\", \"dateReserved\": \"2026-06-22T12:27:22.800Z\", \"assignerOrgId\": \"206fc3a0-e175-490b-9eaa-a5738056c9f6\", \"datePublished\": \"2026-07-22T13:09:30.500Z\", \"assignerShortName\": \"NLnet Labs\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-55708

Vulnerability from fkie_nvd - Published: 2026-07-22 14:17 - Updated: 2026-07-22 20:33

Severity

3.1 (Low) - CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Summary

References

	URL	Tags
	sep@nlnetlabs.nl	https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-55708.txt

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Unbound",
          "vendor": "NLnet Labs",
          "versions": [
            {
              "lessThan": "1.25.2",
              "status": "affected",
              "version": "1.6.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "sep@nlnetlabs.nl"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the \u0027view_local_data\u0027 and \u0027view_local_datas\u0027 commands of \u0027unbound-control\u0027 create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the control interface omits adding the default-protected zones (e.g., RFC 1918 reverse, AS112 zones, .onion, .localhost). Once the local zone tree exists without the defaults, every query for a default-protected name from a client mapped to that view escapes to the public DNS via the iterator instead of being answered locally, bypassing local policy expectations."
    }
  ],
  "id": "CVE-2026-55708",
  "lastModified": "2026-07-22T20:33:11.590",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 3.1,
          "baseSeverity": "LOW",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 0.6,
        "impactScore": 2.5,
        "source": "sep@nlnetlabs.nl",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-55708",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-22T14:09:14.145226Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-22T14:17:21.403",
  "references": [
    {
      "source": "sep@nlnetlabs.nl",
      "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-55708.txt"
    }
  ],
  "sourceIdentifier": "sep@nlnetlabs.nl",
  "vulnStatus": "Undergoing Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-1188"
        }
      ],
      "source": "sep@nlnetlabs.nl",
      "type": "Secondary"
    }
  ]
}

GHSA-C386-7QG7-H3QX

Vulnerability from github – Published: 2026-07-22 15:31 – Updated: 2026-07-22 15:31

Details

Severity

3.1 (Low)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-55708"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-1188"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-22T14:17:21Z",
    "severity": "LOW"
  },
  "details": "In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the \u0027view_local_data\u0027 and \u0027view_local_datas\u0027 commands of \u0027unbound-control\u0027 create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the control interface omits adding the default-protected zones (e.g., RFC 1918 reverse, AS112 zones, .onion, .localhost). Once the local zone tree exists without the defaults, every query for a default-protected name from a client mapped to that view escapes to the public DNS via the iterator instead of being answered locally, bypassing local policy expectations.",
  "id": "GHSA-c386-7qg7-h3qx",
  "modified": "2026-07-22T15:31:24Z",
  "published": "2026-07-22T15:31:24Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55708"
    },
    {
      "type": "WEB",
      "url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-55708.txt"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

MSRC_CVE-2026-55708

Vulnerability from csaf_microsoft - Published: 2026-07-23 01:03 - Updated: 2026-07-23 01:03

Summary

Privacy/configuration issue when adding local data in views through 'unbound-control'

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

CVE-2026-55708

3.1 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

CWE-1188 - Initialization of a Resource with an Insecure Default

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Unresolved product id: 17084-1		—	None Available

References

4 references

URL	Category
https://msrc.microsoft.com/csaf/vex/2026/msrc_cve…	self
https://support.microsoft.com/lifecycle	external
https://www.first.org/cvss	external
https://msrc.microsoft.com/csaf/vex/2026/msrc_cve…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-55708 Privacy/configuration issue when adding local data in views through \u0027unbound-control\u0027 - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-55708.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Privacy/configuration issue when adding local data in views through \u0027unbound-control\u0027",
    "tracking": {
      "current_release_date": "2026-07-23T01:03:36.000Z",
      "generator": {
        "date": "2026-07-23T07:19:41.831Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-55708",
      "initial_release_date": "2026-07-23T01:03:36.000Z",
      "revision_history": [
        {
          "date": "2026-07-23T01:03:36.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 unbound 0:1.25.1-1.azl3",
                "product": {
                  "name": "azl3 unbound 0:1.25.1-1.azl3",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "unbound"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 unbound 0:1.25.1-1.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-55708",
      "cwe": {
        "id": "CWE-1188",
        "name": "Initialization of a Resource with an Insecure Default"
      },
      "notes": [
        {
          "category": "general",
          "text": "NLnet Labs",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "known_affected": [
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-55708 Privacy/configuration issue when adding local data in views through \u0027unbound-control\u0027 - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-55708.json"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "date": "2026-07-23T01:03:36.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.1,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "environmentalScore": 0.0,
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 3.1,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "17084-1"
          ]
        }
      ],
      "title": "Privacy/configuration issue when adding local data in views through \u0027unbound-control\u0027"
    }
  ]
}

ubuntu-cve-2026-55708

Vulnerability from osv_ubuntu

Published

2026-07-23 00:00

Modified

2026-07-23 00:00

Summary

Details

(In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_loca ...)

Severity

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-55708	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-55708	REPORT
	https://community.nlnetlabs.nl/t/unbound-1-25-2-r…	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libunbound2",
            "binary_version": "1.4.22-1ubuntu4.14.04.3+esm3"
          },
          {
            "binary_name": "python-unbound",
            "binary_version": "1.4.22-1ubuntu4.14.04.3+esm3"
          },
          {
            "binary_name": "unbound",
            "binary_version": "1.4.22-1ubuntu4.14.04.3+esm3"
          },
          {
            "binary_name": "unbound-anchor",
            "binary_version": "1.4.22-1ubuntu4.14.04.3+esm3"
          },
          {
            "binary_name": "unbound-host",
            "binary_version": "1.4.22-1ubuntu4.14.04.3+esm3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "unbound",
        "purl": "pkg:deb/ubuntu/unbound@1.4.22-1ubuntu4.14.04.3+esm3?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.20-1",
        "1.4.21-1",
        "1.4.21-1ubuntu1",
        "1.4.21-1ubuntu2",
        "1.4.22-1ubuntu1",
        "1.4.22-1ubuntu2",
        "1.4.22-1ubuntu3",
        "1.4.22-1ubuntu4",
        "1.4.22-1ubuntu4.14.04.1",
        "1.4.22-1ubuntu4.14.04.2",
        "1.4.22-1ubuntu4.14.04.3",
        "1.4.22-1ubuntu4.14.04.3+esm1",
        "1.4.22-1ubuntu4.14.04.3+esm2",
        "1.4.22-1ubuntu4.14.04.3+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libunbound2",
            "binary_version": "1.5.8-1ubuntu1.1+esm3"
          },
          {
            "binary_name": "python-unbound",
            "binary_version": "1.5.8-1ubuntu1.1+esm3"
          },
          {
            "binary_name": "unbound",
            "binary_version": "1.5.8-1ubuntu1.1+esm3"
          },
          {
            "binary_name": "unbound-anchor",
            "binary_version": "1.5.8-1ubuntu1.1+esm3"
          },
          {
            "binary_name": "unbound-host",
            "binary_version": "1.5.8-1ubuntu1.1+esm3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "unbound",
        "purl": "pkg:deb/ubuntu/unbound@1.5.8-1ubuntu1.1+esm3?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.22-1ubuntu6",
        "1.5.7-1ubuntu1",
        "1.5.7-1ubuntu2",
        "1.5.8-1ubuntu1",
        "1.5.8-1ubuntu1.1",
        "1.5.8-1ubuntu1.1+esm1",
        "1.5.8-1ubuntu1.1+esm2",
        "1.5.8-1ubuntu1.1+esm3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libunbound2",
            "binary_version": "1.6.7-1ubuntu2.6+esm4"
          },
          {
            "binary_name": "python-unbound",
            "binary_version": "1.6.7-1ubuntu2.6+esm4"
          },
          {
            "binary_name": "python3-unbound",
            "binary_version": "1.6.7-1ubuntu2.6+esm4"
          },
          {
            "binary_name": "unbound",
            "binary_version": "1.6.7-1ubuntu2.6+esm4"
          },
          {
            "binary_name": "unbound-anchor",
            "binary_version": "1.6.7-1ubuntu2.6+esm4"
          },
          {
            "binary_name": "unbound-host",
            "binary_version": "1.6.7-1ubuntu2.6+esm4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "unbound",
        "purl": "pkg:deb/ubuntu/unbound@1.6.7-1ubuntu2.6+esm4?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.6.5-1",
        "1.6.7-1",
        "1.6.7-1build1",
        "1.6.7-1ubuntu1",
        "1.6.7-1ubuntu2",
        "1.6.7-1ubuntu2.1",
        "1.6.7-1ubuntu2.2",
        "1.6.7-1ubuntu2.3",
        "1.6.7-1ubuntu2.4",
        "1.6.7-1ubuntu2.5",
        "1.6.7-1ubuntu2.6",
        "1.6.7-1ubuntu2.6+esm2",
        "1.6.7-1ubuntu2.6+esm3",
        "1.6.7-1ubuntu2.6+esm4"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libunbound8",
            "binary_version": "1.9.4-2ubuntu1.11+esm1"
          },
          {
            "binary_name": "python-unbound",
            "binary_version": "1.9.4-2ubuntu1.11+esm1"
          },
          {
            "binary_name": "python3-unbound",
            "binary_version": "1.9.4-2ubuntu1.11+esm1"
          },
          {
            "binary_name": "unbound",
            "binary_version": "1.9.4-2ubuntu1.11+esm1"
          },
          {
            "binary_name": "unbound-anchor",
            "binary_version": "1.9.4-2ubuntu1.11+esm1"
          },
          {
            "binary_name": "unbound-host",
            "binary_version": "1.9.4-2ubuntu1.11+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "unbound",
        "purl": "pkg:deb/ubuntu/unbound@1.9.4-2ubuntu1.11+esm1?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.9.0-2ubuntu1",
        "1.9.0-2ubuntu2",
        "1.9.4-2",
        "1.9.4-2ubuntu1",
        "1.9.4-2ubuntu1.1",
        "1.9.4-2ubuntu1.2",
        "1.9.4-2ubuntu1.3",
        "1.9.4-2ubuntu1.4",
        "1.9.4-2ubuntu1.5",
        "1.9.4-2ubuntu1.6",
        "1.9.4-2ubuntu1.8",
        "1.9.4-2ubuntu1.9",
        "1.9.4-2ubuntu1.11",
        "1.9.4-2ubuntu1.11+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libunbound8",
            "binary_version": "1.13.1-1ubuntu5.15"
          },
          {
            "binary_name": "python3-unbound",
            "binary_version": "1.13.1-1ubuntu5.15"
          },
          {
            "binary_name": "unbound",
            "binary_version": "1.13.1-1ubuntu5.15"
          },
          {
            "binary_name": "unbound-anchor",
            "binary_version": "1.13.1-1ubuntu5.15"
          },
          {
            "binary_name": "unbound-host",
            "binary_version": "1.13.1-1ubuntu5.15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "unbound",
        "purl": "pkg:deb/ubuntu/unbound@1.13.1-1ubuntu5.15?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.13.1-1ubuntu1",
        "1.13.1-1ubuntu3",
        "1.13.1-1ubuntu5",
        "1.13.1-1ubuntu5.1",
        "1.13.1-1ubuntu5.2",
        "1.13.1-1ubuntu5.3",
        "1.13.1-1ubuntu5.4",
        "1.13.1-1ubuntu5.5",
        "1.13.1-1ubuntu5.7",
        "1.13.1-1ubuntu5.8",
        "1.13.1-1ubuntu5.10",
        "1.13.1-1ubuntu5.11",
        "1.13.1-1ubuntu5.12",
        "1.13.1-1ubuntu5.13",
        "1.13.1-1ubuntu5.14",
        "1.13.1-1ubuntu5.15"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libunbound8",
            "binary_version": "1.19.2-1ubuntu3.8"
          },
          {
            "binary_name": "python3-unbound",
            "binary_version": "1.19.2-1ubuntu3.8"
          },
          {
            "binary_name": "unbound",
            "binary_version": "1.19.2-1ubuntu3.8"
          },
          {
            "binary_name": "unbound-anchor",
            "binary_version": "1.19.2-1ubuntu3.8"
          },
          {
            "binary_name": "unbound-host",
            "binary_version": "1.19.2-1ubuntu3.8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "unbound",
        "purl": "pkg:deb/ubuntu/unbound@1.19.2-1ubuntu3.8?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.17.1-2",
        "1.18.0-2ubuntu1",
        "1.18.0-2ubuntu2",
        "1.19.1-1ubuntu1",
        "1.19.2-1ubuntu1",
        "1.19.2-1ubuntu3",
        "1.19.2-1ubuntu3.1",
        "1.19.2-1ubuntu3.2",
        "1.19.2-1ubuntu3.3",
        "1.19.2-1ubuntu3.4",
        "1.19.2-1ubuntu3.5",
        "1.19.2-1ubuntu3.6",
        "1.19.2-1ubuntu3.7",
        "1.19.2-1ubuntu3.8"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libunbound8",
            "binary_version": "1.24.2-1ubuntu2.1"
          },
          {
            "binary_name": "python3-unbound",
            "binary_version": "1.24.2-1ubuntu2.1"
          },
          {
            "binary_name": "unbound",
            "binary_version": "1.24.2-1ubuntu2.1"
          },
          {
            "binary_name": "unbound-anchor",
            "binary_version": "1.24.2-1ubuntu2.1"
          },
          {
            "binary_name": "unbound-host",
            "binary_version": "1.24.2-1ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "unbound",
        "purl": "pkg:deb/ubuntu/unbound@1.24.2-1ubuntu2.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.22.0-2ubuntu2",
        "1.22.0-2ubuntu4",
        "1.24.2-1ubuntu1",
        "1.24.2-1ubuntu2",
        "1.24.2-1ubuntu2.1"
      ]
    }
  ],
  "aliases": [],
  "details": "(In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the \u0026#x27;view_loca ...)",
  "id": "UBUNTU-CVE-2026-55708",
  "modified": "2026-07-23T00:00:00Z",
  "published": "2026-07-23T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-55708"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-55708"
    },
    {
      "type": "REPORT",
      "url": "https://community.nlnetlabs.nl/t/unbound-1-25-2-released/3430"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-55708"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-55708 (GCVE-0-2026-55708)

FKIE_CVE-2026-55708

GHSA-C386-7QG7-H3QX

MSRC_CVE-2026-55708

ubuntu-cve-2026-55708

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature