CVE-2026-40208
Low · 3.7CVSS
3.7
EPSS
0.4%
Published
Jun 25, 2026
CISA due date
—
The record
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-55537 PraisonAI is a multi-agent teams system. CWE-705
- CVE-2026-45819 baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on… CWE-705
- CVE-2026-10271 A flaw has been found in a4m4 Student-Management-System up to… CWE-705
- GHSA-vpq2-c234-7xj6 @tootallnate/once vulnerable to Incorrect Control Flow Scoping CWE-705
- CVE-2026-3449 Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect… CWE-705
- CVE-2026-3264 A vulnerability was determined in go2ismail Free-CRM up to… CWE-705
- CVE-2026-3262 A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-Syste… CWE-705