{"schema":"vulnpedia.research/1","cve":"CVE-2026-50252","references":[{"url":"https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-50252.txt","tags":["vendor-advisory","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"NLnet Labs","modified":"2026-07-22T13:08:54.981Z","origins":[{"source":"mitre","sourceId":"NLnet Labs","modified":"2026-07-22T13:08:54.981Z","url":"https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-50252.txt"},{"source":"nvd","sourceId":"CVE-2026-50252","modified":"2026-10-24T13:10:00.147","url":"https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-50252.txt"},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-50252.txt"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-50252","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-50252"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2506133","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2506133"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-50252","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-50252"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50252","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-50252"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:68291","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://access.redhat.com/errata/RHSA-2026:68291"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69120","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69120"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:68292","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://access.redhat.com/errata/RHSA-2026:68292"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:43588","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://access.redhat.com/errata/RHSA-2026:43588"}]},{"source":"euvd","sourceId":"EUVD-2026-47676","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-47676","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-47676","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-47676"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-10.2.Z:python3-unbound-0:1.24.2-7.el10_2.5.aarch64","product":"python3-unbound-0:1.24.2-7.el10_2.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/python3-unbound@1.24.2-7.el10_2.5?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-10.2.Z:unbound-0:1.24.2-7.el10_2.5.s390x","product":"unbound-0:1.24.2-7.el10_2.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound@1.24.2-7.el10_2.5?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-10.2.Z:unbound-anchor-debuginfo-0:1.24.2-7.el10_2.5.s390x","product":"unbound-anchor-debuginfo-0:1.24.2-7.el10_2.5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-anchor-debuginfo@1.24.2-7.el10_2.5?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-10.2.Z:unbound-dracut-0:1.24.2-7.el10_2.5.aarch64","product":"unbound-dracut-0:1.24.2-7.el10_2.5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-dracut@1.24.2-7.el10_2.5?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-10.2.Z:unbound-libs-debuginfo-0:1.24.2-7.el10_2.5.ppc64le","product":"unbound-libs-debuginfo-0:1.24.2-7.el10_2.5.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-libs-debuginfo@1.24.2-7.el10_2.5?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-10.2.Z:unbound-utils-debuginfo-0:1.24.2-7.el10_2.5.x86_64","product":"unbound-utils-debuginfo-0:1.24.2-7.el10_2.5.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-utils-debuginfo@1.24.2-7.el10_2.5?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:python3-unbound-debuginfo-0:1.16.2-5.14.el8_10.2.x86_64","product":"python3-unbound-debuginfo-0:1.16.2-5.14.el8_10.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69120"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/python3-unbound-debuginfo@1.16.2-5.14.el8_10.2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:unbound-debuginfo-0:1.16.2-5.14.el8_10.2.x86_64","product":"unbound-debuginfo-0:1.16.2-5.14.el8_10.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69120"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-debuginfo@1.16.2-5.14.el8_10.2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:unbound-devel-0:1.16.2-5.14.el8_10.2.x86_64","product":"unbound-devel-0:1.16.2-5.14.el8_10.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69120"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-devel@1.16.2-5.14.el8_10.2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:unbound-libs-debuginfo-0:1.16.2-5.14.el8_10.2.s390x","product":"unbound-libs-debuginfo-0:1.16.2-5.14.el8_10.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:69120"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-libs-debuginfo@1.16.2-5.14.el8_10.2?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:python3-unbound-debuginfo-0:1.24.2-3.el9_8.6.x86_64","product":"python3-unbound-debuginfo-0:1.24.2-3.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68292"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/python3-unbound-debuginfo@1.24.2-3.el9_8.6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:unbound-debuginfo-0:1.24.2-3.el9_8.6.s390x","product":"unbound-debuginfo-0:1.24.2-3.el9_8.6.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68292"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-debuginfo@1.24.2-3.el9_8.6?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:unbound-dracut-0:1.24.2-3.el9_8.6.x86_64","product":"unbound-dracut-0:1.24.2-3.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68292"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-dracut@1.24.2-3.el9_8.6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:unbound-libs-debuginfo-0:1.24.2-3.el9_8.6.x86_64","product":"unbound-libs-debuginfo-0:1.24.2-3.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68292"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-libs-debuginfo@1.24.2-3.el9_8.6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"CRB-10.2.Z:unbound-debuginfo-0:1.24.2-7.el10_2.5.aarch64","product":"unbound-debuginfo-0:1.24.2-7.el10_2.5.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-debuginfo@1.24.2-7.el10_2.5?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"CRB-10.2.Z:unbound-devel-0:1.24.2-7.el10_2.5.s390x","product":"unbound-devel-0:1.24.2-7.el10_2.5.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-devel@1.24.2-7.el10_2.5?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"CRB-10.2.Z:unbound-utils-debuginfo-0:1.24.2-7.el10_2.5.x86_64","product":"unbound-utils-debuginfo-0:1.24.2-7.el10_2.5.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68291"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-utils-debuginfo@1.24.2-7.el10_2.5?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"CRB-9.8.0.Z.MAIN.EUS:unbound-debuginfo-0:1.24.2-3.el9_8.6.x86_64","product":"unbound-debuginfo-0:1.24.2-3.el9_8.6.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68292"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-debuginfo@1.24.2-3.el9_8.6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"CRB-9.8.0.Z.MAIN.EUS:unbound-devel-0:1.24.2-3.el9_8.6.s390x","product":"unbound-devel-0:1.24.2-3.el9_8.6.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:68292"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/unbound-devel@1.24.2-3.el9_8.6?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"Red Hat Hardened Images:unbound-main@x86_64","product":"unbound-main@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:43588"},{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."}],"purl":"pkg:rpm/redhat/python3-unbound@1.25.2-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_7:unbound","product":"unbound as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/unbound","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_7:unbound-devel","product":"unbound-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/unbound-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_7:unbound-libs","product":"unbound-libs as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/unbound-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_7:unbound-python","product":"unbound-python as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/unbound-python","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_7:unbound.src","product":"unbound.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/unbound?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","product":"openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Disable the so-reuseport option by explicitly setting so-reuseport: no in your unbound.conf file. This prevents the deterministic mapping of worker threads to outbound UDP source ports, effectively stopping the cache poisoning vector. Additionally, restrict who can query the resolver using the access-control directive to reduce the overall attack surface, and restart the Unbound service to apply the changes."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_6:unbound","product":"unbound as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/unbound","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_6:unbound-devel","product":"unbound-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/unbound-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_6:unbound-libs","product":"unbound-libs as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/unbound-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_6:unbound-python","product":"unbound-python as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/unbound-python","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]},{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json","productId":"red_hat_enterprise_linux_6:unbound.src","product":"unbound.src as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/unbound?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-50252","modified":"2026-09-21T06:15:34+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50252.json"}]}],"vendorCoverage":{"total":195,"shown":32,"omitted":163,"source":"redhat"}}