CVE-2026-82720

A flaw was found in Unbound. When compiled with DNS-over-HTTPs DoH support, a use-after-free vulnerability exists in the DoH stream cleanup code. A remote malicious actor can exploit this by sending a specially crafted DoH connection under specific failure conditions, such as an RPZ drop query or...