PPowerDNS

Products

Exploited and recent CVEs

• CVE-2026-52688 High 7.5 RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation 0.2%
• CVE-2026-52686 Low 3.7 Wildcard CNAME proof validation bypass 0.2%
• CVE-2026-52684 Low 3.7 Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack 0.2%
• CVE-2026-42389 Medium 5.3 Reject more queries with invalid header values 0.3%
• CVE-2026-52690 Medium 5.9 Spoofed answers can mark an authoritative non-EDNS capable 0.4%
• CVE-2026-42390 Medium 5.3 ZONEMD validation can be bypassed 0.3%
• CVE-2026-42388 Medium 5.9 Missing input validation for catalog zones 0.5%
• CVE-2026-42387 Medium 5.9 Insufficient input validation in ZoneToCache 0.5%
• CVE-2026-40012 Medium 5.3 Information about ECS zero scoped answers might leak to clients that use a specific ECS 0.5%
• CVE-2026-33612 High 7.5 ZoneToCache can poison the cache 0.1%
• CVE-2026-42004 Low 3.7 EDNS options smuggling 0.2%
• CVE-2026-40211 Medium 5.3 Denial of service via crafted DoH3 queries 0.7%
• CVE-2026-40210 Medium 4.8 Out-of-bounds read in SetMacAddrAction 0.7%
• CVE-2026-40209 Medium 5.3 Denial of service via IXFR queries 0.7%
• CVE-2026-40208 Low 3.7 Denial of service via DoH3 queries 0.4%
• CVE-2026-40011 Low 3.7 Prometheus denial of service via crafted DNS queries 0.2%
• CVE-2026-42005 Medium 4.3 Insufficient input validation of internal web server 0.6%
• CVE-2026-41999 Medium 4.8 Incorrect Behaviour of Views with TCP PROXY Requests 0.1%
• CVE-2026-42002 Medium 5.9 Concurrency and locking defects in GSS-TSIG 0.3%
• CVE-2026-42001 High 7.5 Insufficient Validation of Autoprimary SOA Queries 0.4%
• CVE-2026-42000 Medium 6.8 Insufficient Validation of Names During AXFR 0.2%
• CVE-2026-42396 Medium 4.9 Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail 0.4%
• CVE-2026-33611 Medium 6.5 Insufficient validation of HTTPS and SVCB records 0.4%
• CVE-2026-33610 Medium 5.9 Possible file descriptor exhaustion in forward-dnsupdate 0.4%
• CVE-2026-33609 Medium 5.3 LDAP DN injection 0.2%
• CVE-2026-33608 High 7.4 Incomplete domain name sanitization during 0.4%
• CVE-2026-33593 High 7.5 Denial of service via crafted DNSCrypt query 0.4%
• CVE-2026-33594 Medium 5.3 Outgoing DoH excessive memory allocation 0.4%
• CVE-2026-33595 Medium 5.3 DoQ/DoH3 excessive memory allocation 0.4%
• CVE-2026-33597 Low 3.7 PRSD detection denial of service 0.3%