CVE-2026-40208

Description

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.

CVSS Vector

References

• https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html