📦

authoritative

Vendor: powerdns

Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 5 Remote Access
Total CVEs 50 Total Indexed
Avg. EPSS 9.98% Exploit Prob.
Latest CVE CVE-2026-42396 May 21

Security Vulnerability Index

Page 4 / 5
7.8 CVSS

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.

EPSS: 81.83%