CVE-2026-50243: Unbound Respip Missing Bogus Checkcve-2026-50243-unbound-respip-missing-bogus-check
Rewriting handler acts on DNS answers without verifying their DNSSEC security status. This can allow spoofed BOGUS answers to be rewritten, effectively bypassing validation. Ensure the handler asserts the security status before proceeding.