Log in Start free

NIC

Products

ProductCVEsExploitedLatest
BIRD2–Oct 18, 2026
Knot Resolver1–Jul 25, 2026

Exploited and recent CVEs

  • CVE-2026-112112 Low 2.3 An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the 0.3%
  • CVE-2026-66374 High 8.1 Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path. 0.6%
  • CVE-2026-49943 Medium 6.3 CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in nest/a-path.c. The as_path_match() function uses a fixed-si 0.3%