← back
CVE-2026-33262

Insufficient validation of cookie reply

CVSS 5.9 MEDIUMEPSS 0.4%CWE-476
An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
PowerDNS · Recursor

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →