Low severity3.7NVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026

CVE-2026-40011

Description

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

Affected products

osv-coords
pkg:rpm/opensuse/dnsdist&distro=openSUSE%20Tumbleweed
Range: < 2.0.7-1.1

Patches

Vulnerability mechanics

References

www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000