PatchTheCVEpowerdns vulnerabilities
Recent CVEs affecting powerdns products. 6 tracked.
powerdns has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-04-22. Highest priority: CVE-2026-33256 (score 36/100).
- CVE-2026-33256 MEDIUM 5.3 UPGRADE An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading
- CVE-2026-33262 MEDIUM 5.9 UPGRADE An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check
- CVE-2026-33610 MEDIUM 5.9 UPGRADE A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDN
- CVE-2026-33601 MEDIUM 4.4 UPGRADE If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that re
- CVE-2026-33609 MEDIUM 5.3 UPGRADE Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of inte
- CVE-2026-33259 MEDIUM 5.0 UPGRADE Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a cr
FAQ
How do I fix powerdns vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is powerdns being exploited right now?
None of the tracked powerdns CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which powerdns CVE should I patch first?
CVE-2026-33256 currently ranks highest (36/100): An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading.