CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,435 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,435
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product powerdns:authoritative. Show all products

11 CVEs, showing 1 to 11
CVESeverityTitlePublished
CVE-2026-33257High 7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Apr 22, 2026
CVE-2026-33260High 7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Apr 22, 2026
CVE-2026-33608Critical 9.8An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend…Apr 22, 2026
CVE-2026-33609Medium 6.5Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.Apr 22, 2026
CVE-2026-33610High 7.5A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.Apr 22, 2026
CVE-2026-33611Medium 4.9An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.Apr 22, 2026
CVE-2026-41999Medium 4.8Incorrect Behaviour of Views with TCP PROXY RequestsMay 21, 2026
CVE-2026-42000High 8.6Insufficient Validation of Names During AXFRMay 21, 2026
CVE-2026-42001High 7.5Insufficient Validation of Autoprimary SOA QueriesMay 21, 2026
CVE-2026-42002High 7.5Concurrency and locking defects in GSS-TSIGMay 21, 2026
CVE-2026-42396Medium 6.5Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to FailMay 21, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.