CVE-2026-55990

Vendor

Microsoft

Product

dnsmasq / Unbound / PowerDNS, Mozilla NSS / GnuTLS / libgcrypt

CVSS

5.9

Exposure class

Edge / VPN / firewall, Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 26
   Advisory MSRC 23 Jul 2026

   CVE-2026-55990 Packet of death for a DNSCrypt misconfigured Unbound

   Information published.

   CVE-2026-55990 Microsoft
2. 15
   CVE NVD 22 Jul 2026

   In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are…

   In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves…

   CVSS 5.9 CVE-2026-55990