Product by Open Source
Powerdns Recursor
24 known vulnerabilities in Powerdns Recursor (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-40211 | Denial of service via crafted DoH3 queries | 5.3 | |
| Medium | CVE-2026-40209 | Denial of service via IXFR queries | 5.3 | |
| Medium | CVE-2026-40210 | Out-of-bounds read in SetMacAddrAction | 4.8 | |
| Medium | CVE-2026-42005 | Insufficient input validation of internal web server | 4.3 | |
| Medium | CVE-2026-42387 | Insufficient input validation in ZoneToCache | 5.9 | |
| Medium | CVE-2026-42388 | Missing input validation for catalog zones | 5.9 | |
| Medium | CVE-2026-52690 | Spoofed answers can mark an authoritative non-EDNS capable | 5.9 | |
| High | CVE-2026-62686 | open source PowerDNS Recursor: security vulnerability | — | |
| High | CVE-2026-52688 | RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation | 7.5 | |
| Medium | CVE-2026-40012 | Information about ECS zero scoped answers might leak to clients that use a specific ECS | 5.3 | |
| High | CVE-2026-33612 | ZoneToCache can poison the cache | 7.5 | |
| Medium | CVE-2026-42390 | ZONEMD validation can be bypassed | 5.3 | |
| Medium | CVE-2026-42389 | Reject more queries with invalid header values | 5.3 | |
| Low | CVE-2026-40208 | Denial of service via DoH3 queries | 3.7 | |
| Low | CVE-2026-42004 | EDNS options smuggling | 3.7 | |
| Low | CVE-2026-40011 | Prometheus denial of service via crafted DNS queries | 3.7 | |
| Not rated | CVE-2026-73206 | open source PowerDNS Recursor: security vulnerability | — | |
| Medium | CVE-2026-85558 | open source PowerDNS Recursor: security vulnerability | — | |
| Medium | CVE-2026-85556 | open source PowerDNS Recursor: security vulnerability | — | |
| Medium | CVE-2026-73205 | open source PowerDNS Recursor: security vulnerability | — | |
| Medium | CVE-2026-85559 | open source PowerDNS Recursor: security vulnerability | — | |
| Medium | CVE-2026-85555 | open source PowerDNS Recursor: security vulnerability | — | |
| Medium | CVE-2026-85557 | open source PowerDNS Recursor: security vulnerability | — | |
| Medium | CVE-2026-52682 | open source PowerDNS Authoritative Server: security vulnerability | — |