{"schema_version":1,"title":"Powerdns vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 30 vulnerabilities in Powerdns: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-52688, was published on 23 July 2026. 3 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/powerdns","json_url":"https://junglewise.ai/threats/vendors/powerdns.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/powerdns","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":3,"all_time":30,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":30},"latest":[{"cve":"CVE-2026-52688","cvss":7.5,"slug":"cve-2026-52688-powerdns-recursor-dnssec-wildcard-validation-bypass-in-rrsig","title":"PowerDNS Recursor DNSSEC wildcard validation bypass in RRSIG processing","severity":"high","exploited":false,"published_at":"2026-07-23T09:16:27.08+00:00","url":"https://junglewise.ai/threats/cve-2026-52688-powerdns-recursor-dnssec-wildcard-validation-bypass-in-rrsig"},{"cve":"CVE-2026-52686","cvss":3.7,"slug":"cve-2026-52686-powerdns-recursor-dnssec-validation-bypass-in-wildcard-cname","title":"PowerDNS Recursor DNSSEC validation bypass in wildcard CNAME/DNAME records","severity":"low","exploited":false,"published_at":"2026-07-23T09:16:26.967+00:00","url":"https://junglewise.ai/threats/cve-2026-52686-powerdns-recursor-dnssec-validation-bypass-in-wildcard-cname"},{"cve":"CVE-2026-52684","cvss":3.7,"slug":"cve-2026-52684-powerdns-recursor-ttl-capping-bypass-in-ns-record-refresh","title":"PowerDNS Recursor TTL capping bypass in NS record refresh","severity":"low","exploited":false,"published_at":"2026-07-23T09:16:26.843+00:00","url":"https://junglewise.ai/threats/cve-2026-52684-powerdns-recursor-ttl-capping-bypass-in-ns-record-refresh"},{"cve":"CVE-2026-52690","cvss":5.9,"slug":"cve-2026-52690-powerdns-recursor-dnssec-validation-failure-via-edns-spoofing","title":"PowerDNS Recursor DNSSEC validation failure via EDNS spoofing","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:45.45+00:00","url":"https://junglewise.ai/threats/cve-2026-52690-powerdns-recursor-dnssec-validation-failure-via-edns-spoofing"},{"cve":"CVE-2026-42390","cvss":5.3,"slug":"cve-2026-42390-powerdns-recursor-improper-zonemd-validation-in-zonetocache","title":"PowerDNS Recursor improper ZONEMD validation in ZoneToCache","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:39.76+00:00","url":"https://junglewise.ai/threats/cve-2026-42390-powerdns-recursor-improper-zonemd-validation-in-zonetocache"},{"cve":"CVE-2026-42389","cvss":5.3,"slug":"cve-2026-42389-powerdns-recursor-insufficient-validation-of-authoritative","title":"PowerDNS Recursor insufficient validation of authoritative answers","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:39.653+00:00","url":"https://junglewise.ai/threats/cve-2026-42389-powerdns-recursor-insufficient-validation-of-authoritative"},{"cve":"CVE-2026-42388","cvss":5.9,"slug":"cve-2026-42388-powerdns-recursor-denial-of-service-in-catalog-zones","title":"PowerDNS Recursor denial of service in Catalog Zones","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:39.557+00:00","url":"https://junglewise.ai/threats/cve-2026-42388-powerdns-recursor-denial-of-service-in-catalog-zones"},{"cve":"CVE-2026-42387","cvss":5.9,"slug":"cve-2026-42387-powerdns-recursor-denial-of-service-in-zonetocache","title":"PowerDNS Recursor denial of service in ZoneToCache","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:39.447+00:00","url":"https://junglewise.ai/threats/cve-2026-42387-powerdns-recursor-denial-of-service-in-zonetocache"},{"cve":"CVE-2026-40012","cvss":5.3,"slug":"cve-2026-40012-powerdns-recursor-incorrect-caching-of-ecs-zero-scoped-answers","title":"PowerDNS Recursor incorrect caching of ECS zero-scoped answers","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:38.84+00:00","url":"https://junglewise.ai/threats/cve-2026-40012-powerdns-recursor-incorrect-caching-of-ecs-zero-scoped-answers"},{"cve":"CVE-2026-42004","cvss":3.7,"slug":"cve-2026-42004-powerdns-dnsdist-edns-options-smuggling-in-edns-processing","title":"PowerDNS DNSdist EDNS options smuggling in EDNS processing","severity":"low","exploited":false,"published_at":"2026-06-25T13:16:40.547+00:00","url":"https://junglewise.ai/threats/cve-2026-42004-powerdns-dnsdist-edns-options-smuggling-in-edns-processing"},{"cve":"CVE-2026-40211","cvss":5.3,"slug":"cve-2026-40211-powerdns-dnsdist-denial-of-service-in-dns-over-http-3","title":"PowerDNS DNSdist denial of service in DNS over HTTP/3","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.717+00:00","url":"https://junglewise.ai/threats/cve-2026-40211-powerdns-dnsdist-denial-of-service-in-dns-over-http-3"},{"cve":"CVE-2026-40210","cvss":4.8,"slug":"cve-2026-40210-powerdns-dnsdist-out-of-bounds-read-in-setmacaddraction","title":"PowerDNS DNSdist out-of-bounds read in SetMacAddrAction","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.62+00:00","url":"https://junglewise.ai/threats/cve-2026-40210-powerdns-dnsdist-out-of-bounds-read-in-setmacaddraction"},{"cve":"CVE-2026-40209","cvss":5.3,"slug":"cve-2026-40209-powerdns-dnsdist-denial-of-service-via-ixfr-queries","title":"PowerDNS DNSdist denial of service via IXFR queries","severity":"medium","exploited":false,"published_at":"2026-06-25T13:16:39.527+00:00","url":"https://junglewise.ai/threats/cve-2026-40209-powerdns-dnsdist-denial-of-service-via-ixfr-queries"},{"cve":"CVE-2026-40208","cvss":3.7,"slug":"cve-2026-40208-powerdns-dnsdist-denial-of-service-in-doh3-queries","title":"PowerDNS DNSdist denial of service in DoH3 queries","severity":"low","exploited":false,"published_at":"2026-06-25T13:16:39.427+00:00","url":"https://junglewise.ai/threats/cve-2026-40208-powerdns-dnsdist-denial-of-service-in-doh3-queries"},{"cve":"CVE-2026-40011","cvss":3.7,"slug":"cve-2026-40011-powerdns-dnsdist-denial-of-service-in-prometheus-endpoint","title":"PowerDNS DNSdist denial of service in Prometheus endpoint","severity":"low","exploited":false,"published_at":"2026-06-25T13:16:39.323+00:00","url":"https://junglewise.ai/threats/cve-2026-40011-powerdns-dnsdist-denial-of-service-in-prometheus-endpoint"},{"cve":"CVE-2026-33612","cvss":7.5,"slug":"cve-2026-33612-powerdns-recursor-cache-poisoning-in-zonetocache-function","title":"PowerDNS Recursor cache poisoning in ZoneToCache function","severity":"high","exploited":false,"published_at":"2026-06-25T13:16:38.437+00:00","url":"https://junglewise.ai/threats/cve-2026-33612-powerdns-recursor-cache-poisoning-in-zonetocache-function"},{"cve":"CVE-2026-42005","cvss":4.3,"slug":"cve-2026-42005-powerdns-authoritative-server-denial-of-service-in-internal-web","title":"PowerDNS Authoritative Server denial of service in internal web server","severity":"medium","exploited":false,"published_at":"2026-06-25T12:16:47.35+00:00","url":"https://junglewise.ai/threats/cve-2026-42005-powerdns-authoritative-server-denial-of-service-in-internal-web"},{"cve":"CVE-2026-42396","cvss":4.9,"slug":"cve-2026-42396-powerdns-authoritative-server-denial-of-service-in-catalog-zone","title":"PowerDNS Authoritative Server denial of service in catalog zone transfer","severity":"medium","exploited":false,"published_at":"2026-05-21T10:16:25.927+00:00","url":"https://junglewise.ai/threats/cve-2026-42396-powerdns-authoritative-server-denial-of-service-in-catalog-zone"},{"cve":"CVE-2026-42002","cvss":5.9,"slug":"cve-2026-42002-powerdns-authoritative-server-denial-of-service-in-gss-tsig","title":"PowerDNS Authoritative Server denial of service in GSS-TSIG","severity":"medium","exploited":false,"published_at":"2026-05-21T10:16:25.8+00:00","url":"https://junglewise.ai/threats/cve-2026-42002-powerdns-authoritative-server-denial-of-service-in-gss-tsig"},{"cve":"CVE-2026-42001","cvss":7.5,"slug":"cve-2026-42001-powerdns-authoritative-server-insufficient-validation-of","title":"PowerDNS Authoritative Server insufficient validation of Autoprimary SOA queries","severity":"high","exploited":false,"published_at":"2026-05-21T10:16:25.683+00:00","url":"https://junglewise.ai/threats/cve-2026-42001-powerdns-authoritative-server-insufficient-validation-of"},{"cve":"CVE-2026-42000","cvss":6.8,"slug":"cve-2026-42000-powerdns-authoritative-server-insufficient-name-validation-in","title":"PowerDNS Authoritative Server insufficient name validation in AXFR","severity":"medium","exploited":false,"published_at":"2026-05-21T10:16:25.563+00:00","url":"https://junglewise.ai/threats/cve-2026-42000-powerdns-authoritative-server-insufficient-name-validation-in"},{"cve":"CVE-2026-41999","cvss":4.8,"slug":"cve-2026-41999-powerdns-authoritative-server-incorrect-view-handling-with-tcp","title":"PowerDNS Authoritative Server incorrect view handling with TCP PROXY","severity":"medium","exploited":false,"published_at":"2026-05-21T10:16:25.433+00:00","url":"https://junglewise.ai/threats/cve-2026-41999-powerdns-authoritative-server-incorrect-view-handling-with-tcp"},{"cve":"CVE-2026-33611","cvss":6.5,"slug":"cve-2026-33611-powerdns-authoritative-server-database-corruption-via-rest-api","title":"PowerDNS Authoritative Server database corruption via REST API","severity":"medium","exploited":false,"published_at":"2026-04-22T14:16:55+00:00","url":"https://junglewise.ai/threats/cve-2026-33611-powerdns-authoritative-server-database-corruption-via-rest-api"},{"cve":"CVE-2026-27854","cvss":4.8,"epss":0.0047,"slug":"cve-2026-27854-powerdns-dnsdist-use-after-free-in-dnsquestion-getednsoptions","title":"PowerDNS DNSdist use-after-free in DNSQuestion:getEDNSOptions","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:28.053+00:00","url":"https://junglewise.ai/threats/cve-2026-27854-powerdns-dnsdist-use-after-free-in-dnsquestion-getednsoptions"},{"cve":"CVE-2026-27853","cvss":5.9,"epss":0.0049,"slug":"cve-2026-27853-powerdns-dnsdist-out-of-bounds-write-in-changename-lua-methods","title":"PowerDNS DNSdist out-of-bounds write in changeName Lua methods","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.917+00:00","url":"https://junglewise.ai/threats/cve-2026-27853-powerdns-dnsdist-out-of-bounds-write-in-changename-lua-methods"}],"vendor":{"hub":true,"name":"Powerdns","slug":"powerdns","homepage":"https://www.powerdns.com/","description":"An open-source provider of DNS software and services.","url":"https://junglewise.ai/threats/vendors/powerdns"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-52688","cvss":7.5,"slug":"cve-2026-52688-powerdns-recursor-dnssec-wildcard-validation-bypass-in-rrsig","title":"PowerDNS Recursor DNSSEC wildcard validation bypass in RRSIG processing","severity":"high","exploited":false,"published_at":"2026-07-23T09:16:27.08+00:00","url":"https://junglewise.ai/threats/cve-2026-52688-powerdns-recursor-dnssec-wildcard-validation-bypass-in-rrsig"},{"cve":"CVE-2026-33612","cvss":7.5,"slug":"cve-2026-33612-powerdns-recursor-cache-poisoning-in-zonetocache-function","title":"PowerDNS Recursor cache poisoning in ZoneToCache function","severity":"high","exploited":false,"published_at":"2026-06-25T13:16:38.437+00:00","url":"https://junglewise.ai/threats/cve-2026-33612-powerdns-recursor-cache-poisoning-in-zonetocache-function"},{"cve":"CVE-2026-42001","cvss":7.5,"slug":"cve-2026-42001-powerdns-authoritative-server-insufficient-validation-of","title":"PowerDNS Authoritative Server insufficient validation of Autoprimary SOA queries","severity":"high","exploited":false,"published_at":"2026-05-21T10:16:25.683+00:00","url":"https://junglewise.ai/threats/cve-2026-42001-powerdns-authoritative-server-insufficient-validation-of"},{"cve":"CVE-2026-42000","cvss":6.8,"slug":"cve-2026-42000-powerdns-authoritative-server-insufficient-name-validation-in","title":"PowerDNS Authoritative Server insufficient name validation in AXFR","severity":"medium","exploited":false,"published_at":"2026-05-21T10:16:25.563+00:00","url":"https://junglewise.ai/threats/cve-2026-42000-powerdns-authoritative-server-insufficient-name-validation-in"},{"cve":"CVE-2026-24029","cvss":6.5,"epss":0.0015,"slug":"cve-2026-24029-powerdns-dnsdist-acl-bypass-in-dns-over-https-frontend","title":"PowerDNS DNSdist ACL bypass in DNS over HTTPS frontend","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.633+00:00","url":"https://junglewise.ai/threats/cve-2026-24029-powerdns-dnsdist-acl-bypass-in-dns-over-https-frontend"},{"cve":"CVE-2026-33611","cvss":6.5,"slug":"cve-2026-33611-powerdns-authoritative-server-database-corruption-via-rest-api","title":"PowerDNS Authoritative Server database corruption via REST API","severity":"medium","exploited":false,"published_at":"2026-04-22T14:16:55+00:00","url":"https://junglewise.ai/threats/cve-2026-33611-powerdns-authoritative-server-database-corruption-via-rest-api"},{"cve":"CVE-2026-27853","cvss":5.9,"epss":0.0049,"slug":"cve-2026-27853-powerdns-dnsdist-out-of-bounds-write-in-changename-lua-methods","title":"PowerDNS DNSdist out-of-bounds write in changeName Lua methods","severity":"medium","exploited":false,"published_at":"2026-03-31T12:16:27.917+00:00","url":"https://junglewise.ai/threats/cve-2026-27853-powerdns-dnsdist-out-of-bounds-write-in-changename-lua-methods"},{"cve":"CVE-2026-52690","cvss":5.9,"slug":"cve-2026-52690-powerdns-recursor-dnssec-validation-failure-via-edns-spoofing","title":"PowerDNS Recursor DNSSEC validation failure via EDNS spoofing","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:45.45+00:00","url":"https://junglewise.ai/threats/cve-2026-52690-powerdns-recursor-dnssec-validation-failure-via-edns-spoofing"},{"cve":"CVE-2026-42388","cvss":5.9,"slug":"cve-2026-42388-powerdns-recursor-denial-of-service-in-catalog-zones","title":"PowerDNS Recursor denial of service in Catalog Zones","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:39.557+00:00","url":"https://junglewise.ai/threats/cve-2026-42388-powerdns-recursor-denial-of-service-in-catalog-zones"},{"cve":"CVE-2026-42387","cvss":5.9,"slug":"cve-2026-42387-powerdns-recursor-denial-of-service-in-zonetocache","title":"PowerDNS Recursor denial of service in ZoneToCache","severity":"medium","exploited":false,"published_at":"2026-06-25T14:16:39.447+00:00","url":"https://junglewise.ai/threats/cve-2026-42387-powerdns-recursor-denial-of-service-in-zonetocache"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Powerdns Dnsdist","slug":"dnsdist","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/dnsdist"},{"name":"Powerdns Recursor","slug":"recursor","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/recursor"},{"name":"PowerDNS Authoritative Server","slug":"authoritative-server","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/authoritative-server"}]}