Description
Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.
Related CPE's
a
powerdns
authoritative
2
References
https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html
Broken LinkVendor Advisory
Weaknesses
134c704f-9b21-4f2e-91b3-4a467353bcc0
Secondary
CWE-90
CVSS impact metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
5.3 · Medium
Information
Source identifier
Vulnerability status
Analyzed
Published
2026-04-22T14:16:54.770Z
5 months agoLast modified
2026-06-17T10:37:46.767Z
3 months ago