CVE-2026-33608highCWE-94

CVE-2026-33608: high-severity vulnerability in PowerDNS Authoritative

Incomplete domain name sanitization during

Published

Follow this CVE+ Monitor Authoritative+ Monitor pdns

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.4epss 0.4%
An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected products
PowerDNS · Authoritative
Related CVEs — PowerDNS Authoritative

In the same product, most dangerous first.

CVE-2026-42005MEDIUMInsufficient input validation of internal web serverEPSS 0.6%CVE-2026-33260MEDIUMInsufficient input validation of internal webserverEPSS 0.5%CVE-2026-33257MEDIUMInsufficient input validation of internal webserverEPSS 0.5%CVE-2026-33611MEDIUMInsufficient validation of HTTPS and SVCB recordsEPSS 0.4%CVE-2026-33610MEDIUMPossible file descriptor exhaustion in forward-dnsupdateEPSS 0.4%CVE-2026-42001HIGHInsufficient Validation of Autoprimary SOA QueriesEPSS 0.4%