CVE-2026-33609: Powerdns Authoritative

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.

Affected products

• Powerdns Authoritative: from 4.9.0, before 4.9.14 (fixed in 4.9.14); from 5.0.0, before 5.0.4 (fixed in 5.0.4)

Published 2026-04-22. Last modified 2026-06-17.