CVE-2026-33610: Powerdns Authoritative

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

Affected products

• Powerdns Authoritative: from 4.9.0, before 4.9.14 (fixed in 4.9.14); from 5.0.0, before 5.0.4 (fixed in 5.0.4)

Published 2026-04-22. Last modified 2026-06-17.