HIGHCVSS v3.1 7.5Vulnerability
CVE-2026-97206
NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client-triggered QUIC path migration can enter stream/connection cleanup while a mesh reply still retains a pointer to the DoQ stream. Cleanup frees the DoQ stream and when the pending mesh reply later completes it dereferences a stale pointer leading to a crash.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-10-23T02:14:06.697318+00:00
- Epss score
- 0.00263
- Cvss severity
- HIGH
- Cvss score
- 7.5
- Retrieved at
- 2026-10-23T02:20:30+00:00
- Last source
- NVD
- Score
- 7.5
- Cvss version
- 3.1
- Cve id
- CVE-2026-97206
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- First seen by Signal
- 2026-10-21T22:34:38+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Published at
- 2026-10-21T09:17:08.473
- Last modified
- 2026-10-22T15:22:40.700
- Epss percentile
- 0.17106
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph