CVE-2026-55717 | NLnet Labs Unbound up to 1.25.1 serve-expired-client-timeout null pointer dereference (WID-SEC-2026-2492)

A vulnerability, which was classified as critical, was found in NLnet Labs Unbound up to 1.25.1. Affected by this issue is some unknown functionality of the component serve-expired-client-timeout. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2026-55717. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.