What is CVE-2026-77860?

CVE-2026-77860 is a security advisory published by Microsoft Security Response Center (MSRC). 'serve-expired' can bypass Unbound 'wait-limit'

Which CVE IDs does CVE-2026-77860 cover?

CVE-2026-77860 covers the following CVE IDs: CVE-2026-77860. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

CVE-2026-77860 has a CVSS v3 base score of 3.7, published by Microsoft Security Response Center (MSRC).

CVE-2026-77860 affects 1 product, including: azl3 unbound 1.26.0-1 on Azure Linux 3.0.

CVE-2026-77860CVSS 3.7

Vendor

Published

September 17, 2026

Last Modified

—

Security Update — fixed build 1.26.1-1