CVE-2026-82399 | CoreDNS up to 1.14.6 DNS-over-HTTPS plugin/pkg/doh/doh.go dns.Msg.Unpack allocation of resources

September 16, 2026 Yanac

A vulnerability has been found in CoreDNS up to 1.14.6 and classified as problematic. This affects the function dns.Msg.Unpack of the file plugin/pkg/doh/doh.go of the component DNS-over-HTTPS. The manipulation leads to allocation of resources.

This vulnerability is listed as CVE-2026-82399. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More