NSD
- Software type
- Other
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/10/2026, NSD recorded 4 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of NSD and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-19538Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLSCVE-2026-19401Remote UDP DoS by sending multiple DNS Cookie optionsCVE-2026-18916Remote TCP DoS by throttling the TCP receive windowCVE-2026-18664Wrong interpretation of ACL rangesCVE-2026-12490Bypass of client certificate verification with transfer over TLS| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-19538Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS | Exploitation statusNot exploited | FixYes | Published08/26/2026 | SeverityHigh |
CVE-2026-19401Remote UDP DoS by sending multiple DNS Cookie options | Exploitation statusNot exploited | FixYes | Published08/26/2026 | SeverityHigh |
CVE-2026-18916Remote TCP DoS by throttling the TCP receive window | Exploitation statusNot exploited | FixYes | Published08/26/2026 | SeverityMedium |
CVE-2026-18664Wrong interpretation of ACL ranges | Exploitation statusNot exploited | FixYes | Published08/26/2026 | SeverityHigh |
CVE-2026-12490Bypass of client certificate verification with transfer over TLS | Exploitation statusNot exploited | FixYes | Published06/25/2026 | SeverityHigh |
CVE-2026-12246Out of bounds stack write with crafted APL RR | Exploitation statusNot exploited | FixYes | Published06/25/2026 | SeverityHigh |
CVE-2026-12245Denial of DNS over TLS service by any DoT client | Exploitation statusNot exploited | FixYes | Published06/25/2026 | SeverityHigh |
CVE-2026-12244Heap overflow and crash with crafted SVCB RR | Exploitation statusNot exploited | FixYes | Published06/25/2026 | SeverityHigh |
CVE-2020-28935Local symlink attack in Unbound and NSD | Exploitation statusNot confirmed | FixNo | Published12/07/2020 | SeverityUnknown |
9 Results | Page 1 of 1