CVE-2026-40210: Powerdns Dnsdist

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.

Affected products

• Powerdns Dnsdist: from 1.9.0, before 1.9.15 (fixed in 1.9.15); from 2.0.0, before 2.0.7 (fixed in 2.0.7)

Published 2026-06-25. Last modified 2026-06-25.