Medium severity5.9NVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026

CVE-2026-42387

Description

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation.

Patches

Vulnerability mechanics

References

docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000