CVE-2026-33612: Powerdns Recursor

High severity, CVSS 7.5. EPSS: 0.1% chance of exploitation in the next 30 days.

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.

Affected products

• Powerdns Recursor: from 5.2.0, before 5.2.11 (fixed in 5.2.11); from 5.3.0, before 5.3.8 (fixed in 5.3.8); from 5.4.0, before 5.4.3 (fixed in 5.4.3)

Published 2026-06-25. Last modified 2026-06-25.