cve-2026-32792

CVE-2026-32792 is a denial-of-service vulnerability in NLnet Labs Unbound versions 1.6.2 through 1.25.0 when built with DNSCrypt support. Disclosed on May 20, 2026, the flaw allows a malformed encrypted DNS query to crash the resolver. While not a Windows-specific vulnerability, it affects Windows environments relying on Unbound for DNS resolution. A resolver crash can cause network outages that appear as general internet connectivity failures. The tag covers discussions about the vulnerability's impact on DNS infrastructure, mitigation strategies, and the broader lesson about fragility in optional privacy features like DNSCrypt. WindowsForum threads explore how this flaw can disrupt Windows-based networks and what administrators should do to protect their DNS infrastructure.