CVE-2026-80225

Name of the Vulnerable Software and Affected Versions NLnetLabs Unbound versions prior to 1.27.0

Description A degradation of service issue exists in the TCP/DoT reading procedure due to the absence of a limit on consecutive reads. A malicious actor can monopolize a single worker's entire event loop by streaming and sustaining a rate of distinct uncached names over the TCP/DoT connection, provided their writes remain ahead of the drain.

Recommendations Update NLnetLabs Unbound to a version newer than 1.26.0.