Description

An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.

Related CPE's

a

powerdns

authoritative

2

References

https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html

Broken Link

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary
CWE-190

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

6.5 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2026-04-22T14:16:55.000Z

5 months ago

Last modified

2026-06-17T10:37:46.983Z

3 months ago