{"schema_version":1,"title":"Powerdns Dnsdist vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Powerdns Dnsdist: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-42004, was published on 25 June 2026.","url":"https://junglewise.ai/threats/technologies/dnsdist","json_url":"https://junglewise.ai/threats/technologies/dnsdist.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/dnsdist","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":13,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":13},"latest":[{"cve":"CVE-2026-42004","cvss":3.7,"slug":"cve-2026-42004-powerdns-dnsdist-edns-options-smuggling-in-edns-processing","title":"PowerDNS DNSdist EDNS options smuggling in EDNS processing","severity":"low","exploited":false,"published_at":"2026-06-25T13:16:40.547+00:00","url":"https://junglewise.ai/threats/cve-2026-42004-powerdns-dnsdist-edns-options-smuggling-in-edns-processing"},{"cve":"CVE-2026-40211","cvss":5.3,"slug":"cve-2026-40211-powerdns-dnsdist-denial-of-service-in-dns-over-http-3","title":"PowerDNS DNSdist denial of service in DNS over HTTP/3","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.717+00:00","url":"https://junglewise.ai/threats/cve-2026-40211-powerdns-dnsdist-denial-of-service-in-dns-over-http-3"},{"cve":"CVE-2026-40210","cvss":4.8,"slug":"cve-2026-40210-powerdns-dnsdist-out-of-bounds-read-in-setmacaddraction","title":"PowerDNS DNSdist out-of-bounds read in SetMacAddrAction","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.62+00:00","url":"https://junglewise.ai/threats/cve-2026-40210-powerdns-dnsdist-out-of-bounds-read-in-setmacaddraction"},{"cve":"CVE-2026-40209","cvss":5.3,"slug":"cve-2026-40209-powerdns-dnsdist-denial-of-service-via-ixfr-queries","title":"PowerDNS DNSdist denial of service via IXFR queries","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.527+00:00","url":"https://junglewise.ai/threats/cve-2026-40209-powerdns-dnsdist-denial-of-service-via-ixfr-queries"},{"cve":"CVE-2026-40208","cvss":3.7,"slug":"cve-2026-40208-powerdns-dnsdist-denial-of-service-in-doh3-queries","title":"PowerDNS DNSdist denial of service in DoH3 queries","severity":"low","exploited":false,"published_at":"2026-06-25T13:16:39.427+00:00","url":"https://junglewise.ai/threats/cve-2026-40208-powerdns-dnsdist-denial-of-service-in-doh3-queries"},{"cve":"CVE-2026-40011","cvss":3.7,"slug":"cve-2026-40011-powerdns-dnsdist-denial-of-service-in-prometheus-endpoint","title":"PowerDNS DNSdist denial of service in Prometheus endpoint","severity":"low","exploited":false,"published_at":"2026-06-25T13:16:39.323+00:00","url":"https://junglewise.ai/threats/cve-2026-40011-powerdns-dnsdist-denial-of-service-in-prometheus-endpoint"},{"cve":"CVE-2026-27854","cvss":4.8,"epss":0.0047,"slug":"cve-2026-27854-powerdns-dnsdist-use-after-free-in-dnsquestion-getednsoptions","title":"PowerDNS DNSdist use-after-free in DNSQuestion:getEDNSOptions","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:28.053+00:00","url":"https://junglewise.ai/threats/cve-2026-27854-powerdns-dnsdist-use-after-free-in-dnsquestion-getednsoptions"},{"cve":"CVE-2026-27853","cvss":5.9,"epss":0.0049,"slug":"cve-2026-27853-powerdns-dnsdist-out-of-bounds-write-in-changename-lua-methods","title":"PowerDNS DNSdist out-of-bounds write in changeName Lua methods","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.917+00:00","url":"https://junglewise.ai/threats/cve-2026-27853-powerdns-dnsdist-out-of-bounds-write-in-changename-lua-methods"},{"cve":"CVE-2026-24030","cvss":5.3,"epss":0.0054,"slug":"cve-2026-24030-powerdns-dnsdist-denial-of-service-via-unbounded-memory","title":"PowerDNS DNSdist denial of service via unbounded memory allocation in DoQ and DoH3","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.77+00:00","url":"https://junglewise.ai/threats/cve-2026-24030-powerdns-dnsdist-denial-of-service-via-unbounded-memory"},{"cve":"CVE-2026-24029","cvss":6.5,"epss":0.0015,"slug":"cve-2026-24029-powerdns-dnsdist-acl-bypass-in-dns-over-https-frontend","title":"PowerDNS DNSdist ACL bypass in DNS over HTTPS frontend","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.633+00:00","url":"https://junglewise.ai/threats/cve-2026-24029-powerdns-dnsdist-acl-bypass-in-dns-over-https-frontend"},{"cve":"CVE-2026-24028","cvss":5.3,"epss":0.0103,"slug":"cve-2026-24028-powerdns-dnsdist-out-of-bounds-read-in-lua-dns-packet-parsing","title":"PowerDNS DNSdist out-of-bounds read in Lua DNS packet parsing","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.487+00:00","url":"https://junglewise.ai/threats/cve-2026-24028-powerdns-dnsdist-out-of-bounds-read-in-lua-dns-packet-parsing"},{"cve":"CVE-2026-0397","cvss":3.1,"epss":0.0016,"slug":"cve-2026-0397-powerdns-dnsdist-information-disclosure-via-cors-misconfiguration","title":"PowerDNS DNSdist information disclosure via CORS misconfiguration in dashboard","severity":"low","exploited":false,"published_at":"2026-03-31T12:16:27.34+00:00","url":"https://junglewise.ai/threats/cve-2026-0397-powerdns-dnsdist-information-disclosure-via-cors-misconfiguration"},{"cve":"CVE-2026-0396","cvss":3.1,"epss":0.0014,"slug":"cve-2026-0396-powerdns-dnsdist-html-injection-in-web-dashboard","title":"PowerDNS DNSdist HTML injection in web dashboard","severity":"low","exploited":false,"published_at":"2026-03-31T12:16:27.19+00:00","url":"https://junglewise.ai/threats/cve-2026-0396-powerdns-dnsdist-html-injection-in-web-dashboard"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Powerdns Recursor","slug":"recursor","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/recursor"},{"name":"PowerDNS Authoritative Server","slug":"authoritative-server","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/authoritative-server"}],"technology":{"hub":true,"name":"Powerdns Dnsdist","slug":"dnsdist","vendor":{"name":"Powerdns","slug":"powerdns","url":"https://junglewise.ai/threats/vendors/powerdns"},"aliases":[],"category":"network-software","homepage":"https://dnsdist.org/","repo_url":"https://github.com/PowerDNS/pdns","description":"A highly DNS-, DoS- and abuse-aware loadbalancer.","url":"https://junglewise.ai/threats/technologies/dnsdist"},"most_severe":[{"cve":"CVE-2026-24029","cvss":6.5,"epss":0.0015,"slug":"cve-2026-24029-powerdns-dnsdist-acl-bypass-in-dns-over-https-frontend","title":"PowerDNS DNSdist ACL bypass in DNS over HTTPS frontend","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.633+00:00","url":"https://junglewise.ai/threats/cve-2026-24029-powerdns-dnsdist-acl-bypass-in-dns-over-https-frontend"},{"cve":"CVE-2026-27853","cvss":5.9,"epss":0.0049,"slug":"cve-2026-27853-powerdns-dnsdist-out-of-bounds-write-in-changename-lua-methods","title":"PowerDNS DNSdist out-of-bounds write in changeName Lua methods","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.917+00:00","url":"https://junglewise.ai/threats/cve-2026-27853-powerdns-dnsdist-out-of-bounds-write-in-changename-lua-methods"},{"cve":"CVE-2026-24028","cvss":5.3,"epss":0.0103,"slug":"cve-2026-24028-powerdns-dnsdist-out-of-bounds-read-in-lua-dns-packet-parsing","title":"PowerDNS DNSdist out-of-bounds read in Lua DNS packet parsing","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.487+00:00","url":"https://junglewise.ai/threats/cve-2026-24028-powerdns-dnsdist-out-of-bounds-read-in-lua-dns-packet-parsing"},{"cve":"CVE-2026-24030","cvss":5.3,"epss":0.0054,"slug":"cve-2026-24030-powerdns-dnsdist-denial-of-service-via-unbounded-memory","title":"PowerDNS DNSdist denial of service via unbounded memory allocation in DoQ and DoH3","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.77+00:00","url":"https://junglewise.ai/threats/cve-2026-24030-powerdns-dnsdist-denial-of-service-via-unbounded-memory"},{"cve":"CVE-2026-40211","cvss":5.3,"slug":"cve-2026-40211-powerdns-dnsdist-denial-of-service-in-dns-over-http-3","title":"PowerDNS DNSdist denial of service in DNS over HTTP/3","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.717+00:00","url":"https://junglewise.ai/threats/cve-2026-40211-powerdns-dnsdist-denial-of-service-in-dns-over-http-3"},{"cve":"CVE-2026-40209","cvss":5.3,"slug":"cve-2026-40209-powerdns-dnsdist-denial-of-service-via-ixfr-queries","title":"PowerDNS DNSdist denial of service via IXFR queries","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.527+00:00","url":"https://junglewise.ai/threats/cve-2026-40209-powerdns-dnsdist-denial-of-service-via-ixfr-queries"},{"cve":"CVE-2026-27854","cvss":4.8,"epss":0.0047,"slug":"cve-2026-27854-powerdns-dnsdist-use-after-free-in-dnsquestion-getednsoptions","title":"PowerDNS DNSdist use-after-free in DNSQuestion:getEDNSOptions","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:28.053+00:00","url":"https://junglewise.ai/threats/cve-2026-27854-powerdns-dnsdist-use-after-free-in-dnsquestion-getednsoptions"},{"cve":"CVE-2026-40210","cvss":4.8,"slug":"cve-2026-40210-powerdns-dnsdist-out-of-bounds-read-in-setmacaddraction","title":"PowerDNS DNSdist out-of-bounds read in SetMacAddrAction","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.62+00:00","url":"https://junglewise.ai/threats/cve-2026-40210-powerdns-dnsdist-out-of-bounds-read-in-setmacaddraction"},{"cve":"CVE-2026-42004","cvss":3.7,"slug":"cve-2026-42004-powerdns-dnsdist-edns-options-smuggling-in-edns-processing","title":"PowerDNS DNSdist EDNS options smuggling in EDNS processing","severity":"low","exploited":false,"published_at":"2026-06-25T13:16:40.547+00:00","url":"https://junglewise.ai/threats/cve-2026-42004-powerdns-dnsdist-edns-options-smuggling-in-edns-processing"},{"cve":"CVE-2026-40208","cvss":3.7,"slug":"cve-2026-40208-powerdns-dnsdist-denial-of-service-in-doh3-queries","title":"PowerDNS DNSdist denial of service in DoH3 queries","severity":"low","exploited":false,"published_at":"2026-06-25T13:16:39.427+00:00","url":"https://junglewise.ai/threats/cve-2026-40208-powerdns-dnsdist-denial-of-service-in-doh3-queries"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}