CVE-2020-14196: Powerdns Recursor

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced.

Affected products

• Powerdns Recursor: up to and including 4.1.16; from 4.2.0, up to and including 4.2.2; from 4.3.0, up to and including 4.3.1

Published 2020-07-01. Last modified 2026-06-17.