CVE-2026-33611

MEDIUM 4.9CVE-2026-33611 · Published 22/04/2026 · updated 26/10/2026

In short

CVE-2026-33611 is a MEDIUM (CVSS 4.9) vulnerability affecting authoritative (powerdns).
Chance of exploitation in the next 30 days (EPSS): 0.42%, higher than 36.7% of all vulnerabilities.
Fix: update to 4.9.14, 5.0.4 or later.

Package	Affected versions	Patched versions
authoritative powerdns	`≥ 4.9.0, < 4.9.14≥ 5.0.0, < 5.0.4`	`4.9.145.0.4`

Description

An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.

References

docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html · Broken Link

More vulnerabilities in authoritative

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free