EUVD-2026-120541

PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the applyrecords handler for /admin/template//apply that lets any authenticated User-role account modify shared zone templates. Attackers can replace a template's record set by name, injecting attacker-chosen NS, MX...

CVE-2026-125378

PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the applyrecords handler for /admin/template//apply that lets any authenticated User-role account modify shared zone templates. Attackers can replace a template's record set by name, injecting attacker-chosen NS, MX...

CVE-2026-125378: PowerDNS-Admin: PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for…

PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the applyrecords handler for /admin/template/...

CVE-2026-125378 PowerDNS-Admin before 2026.11.0 Missing Authorization via Template Apply Endpoint

PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the applyrecords handler for /admin/template//apply that lets any authenticated User-role account modify shared zone templates. Attackers can replace a template's record set by name, injecting attacker-chosen NS, MX...

CVE-2026-125378 PowerDNS-Admin before 2026.11.0 Missing Authorization via Template Apply Endpoint

PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the applyrecords handler for /admin/template//apply that lets any authenticated User-role account modify shared zone templates. Attackers can replace a template's record set by name, injecting attacker-chosen NS, MX...

CVE-2026-125378

PowerDNS-Admin versions before 2026.11.0 are vulnerable to a missing authorization flaw in the apply_records handler for the /admin/template//apply endpoint. This flaw allows any authenticated account with a User-role to modify shared zone templates. An attacker can replace a template's record se...

PT-2026-141201

PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply records handler for /admin/template//apply that lets any authenticated User-role account modify shared zone templates. Attackers can replace a template's record set by name, injecting attacker-chosen NS, M...

CVE-2017-15120_PoC

CVE-2017-15120PoC PowerDNS CVE-2017-15120 / DO NOT ABUSE...

CLEANSTART-2024-BC80351 issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4

Security vulnerability affects the pdns-recursor package. An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4...

CLEANSTART-2024-RZ65064 When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4

Security vulnerability affects the pdns-recursor package. When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4...

CLEANSTART-2024-UH04056 issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4

Security vulnerability affects the pdns-recursor package. An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4...

CLEANSTART-2024-ZW90800 Improper input validation bugs in DNSSEC validators components in PowerDNS version 4

Security vulnerability affects the pdns-recursor package. Improper input validation bugs in DNSSEC validators components in PowerDNS version 4...

CLEANSTART-2024-AK72587 PowerDNS Authoritative Server 4

CVE-2018-14626 affects multiple packages. PowerDNS Authoritative Server 4. See references for individual vulnerability details...

CLEANSTART-2024-TE82838 vulnerability was found in PowerDNS Authoritative Server before 4

Security vulnerability affects the pdns package. A vulnerability was found in PowerDNS Authoritative Server before 4...

CLEANSTART-2024-WV87113 issue has been found in PowerDNS Recursor versions after 4

Security vulnerability affects the pdns-recursor package. An issue has been found in PowerDNS Recursor versions after 4...

CLEANSTART-2024-SM58096 issue has been found in PowerDNS Authoritative Server before 4

Security vulnerability affects the pdns package. An issue has been found in PowerDNS Authoritative Server before 4...

CLEANSTART-2024-WU55425 PowerDNS Recursor up to and including 4

Security vulnerability affects the pdns-recursor package. PowerDNS Recursor up to and including 4...

PT-2026-142151

Security vulnerability affects the pdns-recursor package. In PowerDNS Recursor versions up to and including 4...

CVE-2026-119658

PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to refresh secondary zones they cannot access by supplying a different 'domain' field in the JSON body. Attackers authorized for any one zone can force axfr-retrieve...

CVE-2026-119658 PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update

PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to refresh secondary zones they cannot access by supplying a different 'domain' field in the JSON body. Attackers authorized for any one zone can force axfr-retrieve...