CVE-2026-0398: Powerdns Recursor

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.

Affected products

• Powerdns Recursor: from 5.1.0, before 5.1.10 (fixed in 5.1.10); from 5.2.8, before 5.2.8 (fixed in 5.2.8); from 5.3.0, before 5.3.5 (fixed in 5.3.5)

Published 2026-02-09. Last modified 2026-06-17.