MNBSD-2026-48: packet of death with DNSCrypt

Description

A crafted DNSCrypt packet can crash unbound (packet-of-death Denial of Service). Reported by Andrew Griffiths (calif.io).

Affected Versions

unbound

Recommendations

No specific recommendations provided.

References

• https://nvd.nist.gov/vuln/detail/CVE-2026-32792
• https://nlnetlabs.nl/projects/unbound/security-advisories/

Additional Information

Aliases: CVE-2026-32792

Published: June 11, 2026
Last Modified: June 11, 2026