← All advisories

Medium severity5.3NVD Advisory· Published Apr 22, 2026· Updated Apr 24, 2026

CVE-2026-33609

CVE-2026-33609

Description

Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.

Affected products

2

PowerDNS/Authoritative2 versions
cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*range: >=4.9.0,<4.9.14
- (no CPE)

Patches

Vulnerability mechanics

References

1

docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.htmlnvdBroken LinkVendor Advisory

News mentions

0

No linked articles in our index yet.