CVE-2026-42005: Powerdns Authoritative

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Affected products

• Powerdns Authoritative: from 4.9.0, before 4.9.16 (fixed in 4.9.16); from 5.0.0, before 5.0.6 (fixed in 5.0.6); from 5.1.0, before 5.1.2 (fixed in 5.1.2)

Published 2026-06-25. Last modified 2026-06-25.