What’s Vulnerable › Products

PowerDNS Authoritative vulnerabilities

32 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your PowerDNS Authoritative version is affected

Latest PowerDNS Authoritative vulnerabilities

• CVE-2026-42005 — Insufficient input validation of internal web server (CVSS 4.3)
• CVE-2026-42396 — Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail (CVSS 6.5)
• CVE-2026-42002 — Concurrency and locking defects in GSS-TSIG (CVSS 7.5)
• CVE-2026-42001 — Insufficient Validation of Autoprimary SOA Queries (CVSS 7.5)
• CVE-2026-42000 — Insufficient Validation of Names During AXFR (CVSS 8.6)
• CVE-2026-41999 — Incorrect Behaviour of Views with TCP PROXY Requests (CVSS 4.8)
• CVE-2026-33611 — Insufficient validation of HTTPS and SVCB records (CVSS 4.9)
• CVE-2026-33610 — Possible file descriptor exhaustion in forward-dnsupdate (CVSS 7.5)
• CVE-2026-33609 — LDAP DN injection (CVSS 6.5)
• CVE-2026-33608 — Incomplete domain name sanitization during (CVSS 9.8)
• CVE-2026-33260 — Insufficient input validation of internal webserver (CVSS 7.5)
• CVE-2026-33257 — Insufficient input validation of internal webserver (CVSS 7.5)
• CVE-2020-24698 — (CVSS 9.8)
• CVE-2020-24697 — (CVSS 7.5)
• CVE-2020-24696 — (CVSS 8.1)
• CVE-2020-17482 — (CVSS 4.3)
• CVE-2015-5230 — (CVSS 7.5)
• CVE-2019-10163 — (CVSS 4.3)
• CVE-2019-10162 — (CVSS 7.5)
• CVE-2018-14626 — (CVSS 7.5)
• CVE-2018-10851 — (CVSS 7.5)
• CVE-2016-2120 — (CVSS 6.5)
• CVE-2016-7074 — (CVSS 5.9)
• CVE-2016-7073 — (CVSS 5.9)
• CVE-2016-7068 — (CVSS 7.5)