CVE-2026-42390: Powerdns Recursor

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation.

Affected products

• Powerdns Recursor: from 5.4.0, before 5.4.3 (fixed in 5.4.3)

Published 2026-06-25. Last modified 2026-06-25.