CVE-2026-32792

NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt'). A bad DNSCrypt query could underflow Unbound's DNSCrypt packet reading procedure that may lead to heap overflow. A malicious actor can exploit the vulnerability with a single bad DNSCrypt query that its decrypted plaintext consists entirely of '0x00' bytes and does not contain the expected '0x80' marker. Unbound would then start reading more bytes than necessary until it finds a non-'0x00' byte. Based on the underlying memory allocator and the memory layout, it could lead to heap overflow while reading followed by a crash. Likelihood of a crash is low, since it relies heavily on the underlying memory allocator and the memory layout. If the heap overflow does not happen, Unbound's later packet checks will deny the packet. Unbound 1.25.1 contains a patch with a fix to bound reading in the given buffer space.

• CWE-125
• CWE-166

• https://www.nlnetlabs.nl/downloads/unbound/CVE-2026-32792.txtMitigation, Vendor Advisory

Published

May 20, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32777libexpat before 2.7.5 allows an infinite loop while parsing …5.5
• CVE-2026-32778libexpat before 2.7.5 allows a NULL pointer dereference in t…5.5
• CVE-2026-3278Improper neutralization of input during web page generation …6.1
• CVE-2026-32788Uncontrolled search path for some Approximate Bayesian Infer…5.4
• CVE-2026-3279The Enable jQuery Migrate Helper plugin for WordPress is vul…6.5
• CVE-2026-32791Untrusted search path for some Intel(R) Performance Counter …5.4
• CVE-2026-32794Improper Certificate Validation vulnerability in Apache Airf…4.8
• CVE-2026-32803Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.…3.3
• CVE-2026-32804Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain…8.1
• CVE-2026-32805Romeo gives the capability to reach high code coverage of Go…7.5
• CVE-2026-32806dataCycle is a data management system for centrally storing,…7.5
• CVE-2026-32807dataCycle is a data management system for centrally storing,…7.5