CVE-2026-33258

Summary

By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches.

Affected Software

VendorProductVersion RangeStatus
PowerDNSRecursor5.4.0 < 5.4.1affected
PowerDNSRecursor5.3.0 < 5.3.6affected
PowerDNSRecursor5.2.0 < 5.2.9affected

Weaknesses

  • Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References