Medium severity6.5NVD Advisory· Published Apr 22, 2026· Updated May 12, 2026

CVE-2026-33611

Description

An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.

Affected products

PowerDNS/Authoritative
cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*
Range: >=4.9.0,<4.9.14

Patches

Vulnerability mechanics

References

docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.htmlnvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000