CVE-2026-40208

Denial of service via DoH3 queries

Low · published June 25, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
33.3
In the wild
Unconfirmed
What it is

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00402 · 33.3th percentile
Published
2026-06-25T12:22Z
EPSS history
Timeline
  • 25 JUN 12:22Z
    Denial of service via DoH3 queries
    cvelistv5