GrepRules
Sign inPublish rule
Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
12.4M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-50248: Unbound Ignored Dnssec Statuscve-2026-50248-unbound-ignored-dnssec-status

A DNS lookup callback receives a DNSSEC validation status but processes a successful response (`LDNS_RCODE_NOERROR`) without checking for `sec_status_bogus`. This allows an attacker to spoof BOGUS responses, bypassing DNSSEC validation boundaries. Ensure the security status is validated prior to trusting the lookup result.

CCVE-2026-50248CWE-345
by Provallyupdated 2026-09-02Apache-2.0
1.3K0 direct1.3K via packs
70
All matching rules loaded.