Powerdns vulnerabilities
75 CVEs and advisories name Powerdns as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-52688RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
- CVE-2026-52686Wildcard CNAME proof validation bypass
- CVE-2026-52684Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack
- CVE-2026-42389Reject more queries with invalid header values
- CVE-2026-52690Spoofed answers can mark an authoritative non-EDNS capable
- CVE-2026-42390ZONEMD validation can be bypassed
- CVE-2026-42388Missing input validation for catalog zones
- CVE-2026-42387Insufficient input validation in ZoneToCache
- CVE-2026-40012Information about ECS zero scoped answers might leak to clients that use a specific ECS
- CVE-2026-33612ZoneToCache can poison the cache
- CVE-2026-42004EDNS options smuggling
- CVE-2026-40211Denial of service via crafted DoH3 queries
- CVE-2026-40210Out-of-bounds read in SetMacAddrAction
- CVE-2026-40209Denial of service via IXFR queries
- CVE-2026-40208Denial of service via DoH3 queries
- CVE-2026-40011Prometheus denial of service via crafted DNS queries
- CVE-2026-42005Insufficient input validation of internal web server
- CVE-2026-41999Incorrect Behaviour of Views with TCP PROXY Requests
- CVE-2026-42002Concurrency and locking defects in GSS-TSIG
- CVE-2026-42001Insufficient Validation of Autoprimary SOA Queries
- CVE-2026-42000Insufficient Validation of Names During AXFR
- CVE-2026-42396Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
- CVE-2026-33611Insufficient validation of HTTPS and SVCB records
- CVE-2026-33610Possible file descriptor exhaustion in forward-dnsupdate
- CVE-2026-33609LDAP DN injection
- CVE-2026-33608Incomplete domain name sanitization during
- CVE-2026-33593Denial of service via crafted DNSCrypt query
- CVE-2026-33594Outgoing DoH excessive memory allocation
- CVE-2026-33595DoQ/DoH3 excessive memory allocation
- CVE-2026-33597PRSD detection denial of service