Signal

Multiple high-severity vulnerabilities fixed in NSD, Rapid7 InsightConnect, NetVault, PowerDNS, and Nessus

Evidence first: scan the strongest sources, then decide whether to go deeper.

Published 2026-06-26 00:57 UTCUpdated 2026-06-26 02:00 UTC
rss
cvevulnerabilitiespatchdnssecurity_toolingincident_response
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.
4 top sources shown
Rapid7 InsightConnect: several plugins updated to address vulnerabilities
NCSC-FI - Vulnerabilities · Advisory · nvd.nist.gov · 2026-06-26 02:00 UTC
NetVault 14.0.2 - Release Notes
NCSC-FI - Vulnerabilities · News · support.quest.com · 2026-06-26 02:00 UTC
PowerDNS Security Advisory 2026-08 for PowerDNS Recursor
NCSC-FI - Vulnerabilities · docs.powerdns.com · 2026-06-26 02:00 UTC
NLnet Lbas NSD: multiple vulnerabilities fixed
NCSC-FI - Vulnerabilities · News · nlnetlabs.nl · 2026-06-26 02:00 UTC
Overview

Several critical security vulnerabilities have been addressed across multiple products including NSD DNS server, Rapid7 InsightConnect plugins, Quest NetVault Backup, PowerDNS Recursor, and Tenable Nessus.

Entities
NLnet LabsRapid7QuestPowerDNSTenableNSDInsightConnectNetVault
Score total
1.38
Momentum 24h
6
Posts
6
Origins
5
Source types
1
Duplicate ratio
0%
Why now
  • Multiple high-severity vulnerabilities were disclosed and patched simultaneously, increasing urgency.
  • Some vulnerabilities allow remote exploitation without authentication, raising risk levels.
  • Security teams need to prioritize updates to maintain operational security and compliance.
Why it matters
  • These vulnerabilities affect critical DNS infrastructure and security tools widely used in enterprise environments.
  • Exploitation could lead to denial of service, remote code execution, or data compromise.
  • Timely patching is essential to prevent attackers from leveraging these flaws.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • NSD DNS server has multiple severe vulnerabilities including heap overflow and denial of DNS over TLS service
  • Rapid7 InsightConnect plugins suffer from multiple OS command injection vulnerabilities with CVSS up to 8.8
  • Quest NetVault Backup 14.0.2 fixes multiple SQL injection and cross-site scripting vulnerabilities enabling remote code execution
  • PowerDNS Recursor patched cache poisoning and input validation vulnerabilities with CVSS scores up to 7.5
How sources frame it
  • NLnet Labs: neutral
  • NCSC-FI - Vulnerabilities: neutral
All evidence
All evidence
Rapid7 InsightConnect: several plugins updated to address vulnerabilities
NCSC-FI - Vulnerabilities · nvd.nist.gov · 2026-06-26 02:00 UTC
NetVault 14.0.2 - Release Notes
NCSC-FI - Vulnerabilities · support.quest.com · 2026-06-26 02:00 UTC
PowerDNS Security Advisory 2026-08 for PowerDNS Recursor
NCSC-FI - Vulnerabilities · docs.powerdns.com · 2026-06-26 02:00 UTC
NLnet Lbas NSD: multiple vulnerabilities fixed
NCSC-FI - Vulnerabilities · nlnetlabs.nl · 2026-06-26 02:00 UTC
NSD: CVSS (Max): 8.7
AusCERT - Bulletins · portal.auscert.org.au · 2026-06-26 01:24 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 5Duplicates: -
Showing 5 / 0
Top publishers (this list)
  • NCSC-FI - Vulnerabilities (4)
  • AusCERT - Bulletins (1)
Top origin domains (this list)
  • nvd.nist.gov (1)
  • support.quest.com (1)
  • docs.powerdns.com (1)
  • nlnetlabs.nl (1)
  • portal.auscert.org.au (1)