Medium severity5.9NVD Advisory· Published Apr 22, 2026· Updated Apr 24, 2026

CVE-2026-33610

Description

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

Affected products

PowerDNS/Authoritative
cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*
Range: >=4.9.0,<4.9.14
PowerDNS/Powerdnsllm-fuzzy

Patches

Vulnerability mechanics

References

docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.htmlnvdBroken LinkVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000