CVE-2026-33262

Summary

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

Affected Software

VendorProductVersion RangeStatus
PowerDNSRecursor5.4.0 < 5.4.1affected
PowerDNSRecursor5.3.0 < 5.3.6affected
PowerDNSRecursor5.2.0 < 5.2.9affected

Weaknesses

  • NULL Pointer Dereference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References