CVE-2026-33612

Summary

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.

Affected Software

VendorProductVersion RangeStatus
PowerDNSRecursor5.2.0 < 5.2.11affected
PowerDNSRecursor5.3.0 < 5.3.8affected
PowerDNSRecursor5.4.0 < 5.4.3affected

Weaknesses

  • Acceptance of Extraneous Untrusted Data With Trusted Data

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References