Login Request a demo
PO
Vendor
PowerDNS
7 products with CVEs on record
145
CVEs
0
On KEV
0
New 30D
Products
RE
Recursor
PowerDNS
9.8
64 CVEs0 on KEV0 new
AU
Authoritative
PowerDNS
9.8
32 CVEs0 on KEV0 new
DN
DNSdist
PowerDNS
9.1
31 CVEs0 on KEV0 new
PO
Powerdns
Powerdns
7.5
8 CVEs0 on KEV0 new
AS
Authoritative Server
Powerdns
8.8
7 CVEs0 on KEV0 new
PR
Powerdns Recursor
Powerdns
–
2 CVEs0 on KEV0 new
PD
Pdns
Powerdns
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-52688
RE
Recursor
PowerDNS
7.5
0%
Jul 23RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
CVE-2026-52686
RE
Recursor
PowerDNS
3.7
0%
Jul 23Wildcard CNAME proof validation bypass
CVE-2026-52684
RE
Recursor
PowerDNS
3.7
0%
Jul 23Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack
CVE-2026-42389
RE
Recursor
PowerDNS
5.3
0%
Jun 25Reject more queries with invalid header values
CVE-2026-52690
RE
Recursor
PowerDNS
5.9
0%
Jun 25Spoofed answers can mark an authoritative non-EDNS capable
CVE-2026-42390
RE
Recursor
PowerDNS
5.3
0%
Jun 25ZONEMD validation can be bypassed
CVE-2026-42388
RE
Recursor
PowerDNS
5.9
0%
Jun 25Missing input validation for catalog zones
CVE-2026-42387
RE
Recursor
PowerDNS
5.9
0%
Jun 25Insufficient input validation in ZoneToCache
CVE-2026-40012
RE
Recursor
PowerDNS
5.3
0%
Jun 25Information about ECS zero scoped answers might leak to clients that use a specific ECS
CVE-2026-33612
RE
Recursor
PowerDNS
7.5
0%
Jun 25ZoneToCache can poison the cache
CVE-2026-42004
DN
DNSdist
PowerDNS
3.7
0%
Jun 25EDNS options smuggling
CVE-2026-40211
DN
DNSdist
PowerDNS
5.3
1%
Jun 25Denial of service via crafted DoH3 queries
CVE-2026-40210
DN
DNSdist
PowerDNS
4.8
1%
Jun 25Out-of-bounds read in SetMacAddrAction
CVE-2026-40209
DN
DNSdist
PowerDNS
5.3
1%
Jun 25Denial of service via IXFR queries
CVE-2026-40208
DN
DNSdist
PowerDNS
3.7
0%
Jun 25Denial of service via DoH3 queries
CVE-2026-40011
DN
DNSdist
PowerDNS
3.7
0%
Jun 25Prometheus denial of service via crafted DNS queries
CVE-2026-42005
AU
Authoritative
PowerDNS
4.3
1%
Jun 25Insufficient input validation of internal web server
CVE-2026-41999
AU
Authoritative
PowerDNS
4.8
0%
May 21Incorrect Behaviour of Views with TCP PROXY Requests
CVE-2026-42002
AU
Authoritative
PowerDNS
7.5
0%
May 21Concurrency and locking defects in GSS-TSIG
CVE-2026-42001
AU
Authoritative
PowerDNS
7.5
0%
May 21Insufficient Validation of Autoprimary SOA Queries
CVE-2026-42000
AU
Authoritative
PowerDNS
8.6
0%
May 21Insufficient Validation of Names During AXFR
CVE-2026-42396
AU
Authoritative
PowerDNS
6.5
0%
May 21Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
CVE-2026-33611
AU
Authoritative
PowerDNS
4.9
0%
Apr 22Insufficient validation of HTTPS and SVCB records
CVE-2026-33610
AU
Authoritative
PowerDNS
7.5
0%
Apr 22Possible file descriptor exhaustion in forward-dnsupdate
CVE-2026-33609
AU
Authoritative
PowerDNS
6.5
0%
Apr 22LDAP DN injection
CVE-2026-33608
AU
Authoritative
PowerDNS
9.8
0%
Apr 22Incomplete domain name sanitization during
CVE-2026-33593
DN
DNSdist
PowerDNS
7.5
0%
Apr 22Denial of service via crafted DNSCrypt query
CVE-2026-33594
DN
DNSdist
PowerDNS
7.5
0%
Apr 22Outgoing DoH excessive memory allocation
CVE-2026-33595
DN
DNSdist
PowerDNS
7.5
0%
Apr 22DoQ/DoH3 excessive memory allocation
CVE-2026-33597
DN
DNSdist
PowerDNS
7.5
0%
Apr 22PRSD detection denial of service
CVE-2026-33596
DN
DNSdist
PowerDNS
6.5
0%
Apr 22TCP backend stream ID overflow
CVE-2026-33598
DN
DNSdist
PowerDNS
9.1
1%
Apr 22Out-of-bounds read in cache inspection via Lua
CVE-2026-33599
DN
DNSdist
PowerDNS
8.1
0%
Apr 22Out-of-bounds read in service discovery
CVE-2026-33602
DN
DNSdist
PowerDNS
8.2
1%
Apr 22Off-by-one access when processing crafted UDP responses
CVE-2026-33254
DN
DNSdist
PowerDNS
7.5
0%
Apr 22Resource exhaustion via DoQ/DoH3 connections
CVE-2026-33262
RE
Recursor
PowerDNS
5.9
0%
Apr 22Insufficient validation of cookie reply
CVE-2026-33261
RE
Recursor
PowerDNS
5.9
0%
Apr 22Null pointer accces in aggressive NSEC(3) cache
CVE-2026-33260
RE
Recursor
PowerDNS
7.5
1%
Apr 22Insufficient input validation of internal webserver
CVE-2026-33259
RE
Recursor
PowerDNS
5.0
0%
Apr 22Concurrent modification of RPZ data can lead to denial of servce
CVE-2026-33258
RE
Recursor
PowerDNS
7.5
1%
Apr 22Crafted zones can cause increased resource usage
CVE-2026-33257
RE
Recursor
PowerDNS
7.5
1%
Apr 22Insufficient input validation of internal webserver
CVE-2026-33256
RE
Recursor
PowerDNS
7.5
1%
Apr 22Unbounded memory allocation by internal web server
CVE-2026-33601
RE
Recursor
PowerDNS
4.9
1%
Apr 22Insufficient validation of zonemd record
CVE-2026-33600
RE
Recursor
PowerDNS
4.9
1%
Apr 22Null pointer dereference in RPZ transfer
CVE-2026-27854
DN
DNSdist
PowerDNS
7.5
0%
Mar 31Use after free when parsing EDNS options in Lua
CVE-2026-27853
DN
DNSdist
PowerDNS
7.5
1%
Mar 31Out-of-bounds write when rewriting large DNS packets
CVE-2026-24030
DN
DNSdist
PowerDNS
7.5
1%
Mar 31Unbounded memory allocation for DoQ and DoH3
CVE-2026-24029
DN
DNSdist
PowerDNS
6.5
0%
Mar 31DNS over HTTPS ACL bypass
CVE-2026-24028
DN
DNSdist
PowerDNS
8.2
1%
Mar 31Out-of-bounds read when parsing DNS packets via Lua
CVE-2026-0397
DN
DNSdist
PowerDNS
4.3
0%
Mar 31Information disclosure via CORS misconfiguration
CVE-2026-0396
DN
DNSdist
PowerDNS
4.3
0%
Mar 31HTML injection in the web dashboard
CVE-2025-59024
RE
Recursor
PowerDNS
6.5
0%
Feb 9Crafted delegations or IP fragments can poison cached delegations in Recursor
CVE-2025-59023
RE
Recursor
PowerDNS
8.2
0%
Feb 9Crafted delegations or IP fragments can poison cached delegations in Recursor
CVE-2026-24027
RE
Recursor
PowerDNS
5.3
0%
Feb 9Crafted zones can lead to increased incoming network traffic
CVE-2026-0398
RE
Recursor
PowerDNS
5.3
0%
Feb 9Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor
CVE-2025-59029
RE
Recursor
PowerDNS
5.3
0%
Dec 9Internal logic flaw in cache management can lead to a denial of service in PowerDNS Recursor
CVE-2025-59030
RE
Recursor
PowerDNS
7.5
1%
Dec 9Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor
CVE-2025-30187
DN
DNSdist
PowerDNS
3.7
0%
Sep 18Denial of service via crafted DoH exchange in PowerDNS DNSdist
CVE-2025-30192
RE
Recursor
PowerDNS
7.5
0%
Jul 21A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts
CVE-2025-30193
DN
DNSdist
PowerDNS
7.5
1%
May 20Denial of service via crafted TCP exchange