--- title: "PowerDNS Authoritative vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/powerdns/authoritative type: product description: "PowerDNS Authoritative has 32 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2026-06-25 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # PowerDNS Authoritative vulnerabilities Vendor: [PowerDNS](https://radicalnotion.ai/vendor/powerdns) - **Published CVEs:** 32 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 32 - **Average CVSS:** 7.0 - **First CVE:** 2015-05-18 - **Latest CVE:** 2026-06-25 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 2 | | High | 20 | | Medium | 10 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 6 | | [CWE-400](https://radicalnotion.ai/cwe/cwe-400) | Uncontrolled Resource Consumption | 6 | | [CWE-399](https://radicalnotion.ai/cwe/cwe-399) | Resource Management Errors | 4 | | [CWE-770](https://radicalnotion.ai/cwe/cwe-770) | Allocation of Resources Without Limits or Throttling | 3 | | [CWE-190](https://radicalnotion.ai/cwe/cwe-190) | Integer Overflow or Wraparound | 2 | | [CWE-94](https://radicalnotion.ai/cwe/cwe-94) | Improper Control of Generation of Code ('Code Injection') | 2 | | [CWE-362](https://radicalnotion.ai/cwe/cwe-362) | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 1 | | [CWE-415](https://radicalnotion.ai/cwe/cwe-415) | Double Free | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2015 | 3 | | 2016 | 2 | | 2017 | 0 | | 2018 | 8 | | 2019 | 2 | | 2020 | 5 | | 2021 | 0 | | 2022 | 0 | | 2023 | 0 | | 2024 | 0 | | 2025 | 0 | | 2026 | 12 | ## Affected versions (top 24 of 53) | Version | Kind | CVEs | | --- | --- | --- | | 4.9.0 \<= v \< 4.9.14 | range | 6 | | 5.0.0 \<= v \< 5.0.4 | range | 6 | | 5.0.0 \<= v \< 5.0.5 | range | 5 | | \< 3.4.11 | range | 4 | | 4.0.0 \<= v \< 4.0.2 | range | 4 | | 4.9.0 \<= v \< 4.9.15 | range | 4 | | \<= 4.3.0 | range | 3 | | \<= 3.4.9 | range | 2 | | 3.4.0 | range | 2 | | 3.4.1 | range | 2 | | 3.4.3 | range | 2 | | 3.4.4 | range | 2 | | 4.9.14 | patched | 6 | | 5.0.4 | patched | 6 | | 5.0.5 | patched | 5 | | 3.4.11 | patched | 4 | | 4.0.2 | patched | 4 | | 4.9.15 | patched | 4 | | 4.0.8 | patched | 2 | | 3.4.6 | patched | 1 | | 4.1.10 | patched | 1 | | 4.1.9 | patched | 1 | | 4.3.1 | patched | 1 | | 4.9.16 | patched | 1 | ## CVEs (first 30 of 32, most severe first) | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-42005 | Insufficient input validation of internal web server | medium | 4.3 | No | No | Yes | | CVE-2026-41999 | Incorrect Behaviour of Views with TCP PROXY Requests | medium | 4.8 | No | No | Yes | | CVE-2026-42002 | Concurrency and locking defects in GSS-TSIG | high | 7.5 | No | No | Yes | | CVE-2026-42001 | Insufficient Validation of Autoprimary SOA Queries | high | 7.5 | No | No | Yes | | CVE-2026-42000 | Insufficient Validation of Names During AXFR | high | 8.6 | No | No | Yes | | CVE-2026-42396 | Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail | medium | 6.5 | No | No | Yes | | CVE-2026-33611 | Insufficient validation of HTTPS and SVCB records | medium | 6.5 | No | No | Yes | | CVE-2026-33610 | Possible file descriptor exhaustion in forward-dnsupdate | high | 7.5 | No | No | Yes | | CVE-2026-33609 | LDAP DN injection | medium | 6.5 | No | No | Yes | | CVE-2026-33608 | Incomplete domain name sanitization during | critical | 9.8 | No | No | Yes | | CVE-2026-33260 | Insufficient input validation of internal webserver | high | 7.5 | No | No | Yes | | CVE-2026-33257 | Insufficient input validation of internal webserver | high | 7.5 | No | No | Yes | | CVE-2020-24698 | - | critical | 9.8 | No | No | Yes | | CVE-2020-24697 | - | high | 7.5 | No | No | Yes | | CVE-2020-24696 | - | high | 8.1 | No | No | Yes | | CVE-2020-17482 | - | medium | 4.3 | No | No | Yes | | CVE-2015-5230 | - | high | 7.5 | No | No | Yes | | CVE-2019-10163 | - | medium | 4.3 | No | No | Yes | | CVE-2019-10162 | - | high | 7.5 | No | No | Yes | | CVE-2018-14626 | - | high | 7.5 | No | No | Yes | | CVE-2018-10851 | - | high | 7.5 | No | No | Yes | | CVE-2016-2120 | - | high | 7.5 | No | No | Yes | | CVE-2016-7074 | - | medium | 5.9 | No | No | Yes | | CVE-2016-7073 | - | medium | 5.9 | No | No | Yes | | CVE-2016-7068 | - | high | 7.5 | No | No | Yes | | CVE-2016-7072 | - | high | 7.5 | No | No | Yes | | CVE-2017-15091 | - | high | 7.1 | No | No | Yes | | CVE-2016-5427 | - | high | 7.5 | No | No | Yes | | CVE-2016-5426 | - | high | 7.5 | No | No | Yes | | CVE-2015-5311 | - | medium | 5.0 | No | No | Yes | ## Frequently asked questions ### How many CVEs does PowerDNS Authoritative have? PowerDNS Authoritative has 32 published CVE records since 2015. ### How many PowerDNS Authoritative CVEs are in CISA KEV? None of PowerDNS Authoritative's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for PowerDNS Authoritative vulnerabilities? No PowerDNS Authoritative CVEs currently have a tracked public exploit in this dataset. ### Which versions of PowerDNS Authoritative are affected? 53 distinct PowerDNS Authoritative versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in PowerDNS Authoritative CVEs? PowerDNS Authoritative's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-400 (Uncontrolled Resource Consumption), CWE-399 (Resource Management Errors), CWE-770 (Allocation of Resources Without Limits or Throttling). ### How many critical PowerDNS Authoritative vulnerabilities are there? PowerDNS Authoritative has 2 critical and 20 high-severity CVEs. ### What is the average severity of PowerDNS Authoritative CVEs? The average CVSS base score across PowerDNS Authoritative's scored CVEs is 7.0. ## Other products from this vendor - [pdns](https://radicalnotion.ai/vendor/powerdns/pdns) (110 CVEs) - [Recursor](https://radicalnotion.ai/vendor/powerdns/recursor) (64 CVEs) - [DNSdist](https://radicalnotion.ai/vendor/powerdns/dnsdist) (31 CVEs) - [PowerDNS](https://radicalnotion.ai/vendor/powerdns/powerdns) (9 CVEs) - [authoritative server](https://radicalnotion.ai/vendor/powerdns/authoritative-server) (7 CVEs) - [pdns-recursor](https://radicalnotion.ai/vendor/powerdns/pdns-recursor) (5 CVEs) - [PowerDNS Recursor](https://radicalnotion.ai/vendor/powerdns/powerdns-recursor) (5 CVEs) - [PowerDNS Authoritative](https://radicalnotion.ai/vendor/powerdns/powerdns-authoritative) (1 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/powerdns/authoritative). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.