Critical Security Vulnerability in Python3-Unbound and Unbound Packages: CVE-2026-81642
Summary
RHSA-2026:71610: Red Hat Security Advisory: unbound security update. Affects python3-unbound versions < 0:1.16.2-3.el9_2.6. Fixed in 0:1.16.2-3.el9_2.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Python3-Unbound package is a DNS resolver library that provides a high-performance DNS caching service. It is widely used in various applications for its ability to handle DNS queries efficiently. The Unbound package, which includes the core DNS resolver, is essential for applications that require reliable and fast DNS resolution. This vulnerability affects multiple components of the Unbound ecosystem, including debuginfo and library packages, making it critical for users relying on these packages for their DNS functionalities.
Vulnerability Detail
CVE-2026-81642 is a critical security vulnerability that allows attackers to exploit weaknesses in the Unbound DNS resolver. The vulnerability arises from improper handling of DNS queries, which could lead to denial of service or unauthorized access to sensitive information. The potential ramifications include system crashes, data leakage, and compromised security of applications relying on the affected packages. The CVSS score for this vulnerability is 9.8, indicating its severity and the urgency for remediation.
How To Fix
Minimum fixed version
0:1.16.2-3.el9_2.6
This is the first release that contains the fix.
sudo dnf update python3-unboundTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the exposure of their DNS resolver by implementing firewall rules that restrict access to the Unbound service from untrusted networks. Additionally, disabling certain features of the resolver that are not in use may reduce the attack surface until the patch is applied.
Conclusion
The CVE-2026-81642 vulnerability poses a significant risk to users of the Python3-Unbound and Unbound packages. It is crucial to apply the necessary updates to mitigate potential threats. Users are encouraged to monitor their systems and utilize tools like Vulert for real-time vulnerability alerts.
See every vulnerability recorded for python3-unbound →
FAQ
CVE-2026-81642 is a critical vulnerability in the Unbound DNS resolver that can lead to denial of service and potential data leakage.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, consider implementing firewall rules to restrict access to the Unbound service and disabling unnecessary features.
Failing to address this vulnerability could result in system crashes, unauthorized access to sensitive data, and compromised application security.
More information can be found in the Red Hat Security Advisory and on the official CVE database.
Related vulnerabilities
Recent vulnerabilities recorded for python3-unbound.
