Approved changes feed: RSS · Atom

cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPowerdns (ef825119-8390-5906-a637-f6692acc90eb)
ProductRecursor (747fb593-573c-5107-91c6-5adf2a41b0ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pdns-recursor purl2cpe 2026-06-01 10:12:49.012297
pkg:deb/ubuntu/pdns-recursor purl2cpe 2026-06-01 10:12:49.012299
pkg:github/powerdns/pdns purl2cpe 2026-06-01 10:12:49.012301
pkg:rpm/fedora/pdns-recursor purl2cpe 2026-06-01 10:12:49.012302
pkg:rpm/opensuse/pdns-recursor purl2cpe 2026-06-01 10:12:49.012303

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-52690 vulnerable 2026-07-29 00:57:48.889817 Spoofed answers can mark an authoritative non-EDNS capable
MEDIUM (5.9)
Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail.
Published: 2026-06-25T13:01:40.347Z
Updated: 2026-06-25T14:21:36.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-52688 vulnerable 2026-07-29 00:57:48.889676 RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
HIGH (7.5)
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
Published: 2026-07-23T08:03:58.542Z
Updated: 2026-07-23T13:56:15.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-52686 vulnerable 2026-07-29 00:57:48.889381 Wildcard CNAME proof validation bypass
LOW (3.7)
The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when the wildcard answer is a CNAME or DNAME record.
Published: 2026-07-23T08:03:37.563Z
Updated: 2026-07-23T13:56:55.653Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-52684 vulnerable 2026-07-29 00:57:48.889040 Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack
LOW (3.7)
If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not used. So this case can only happen if almost expired records are used to refresh the authoritative NS records.
Published: 2026-07-23T07:49:04.336Z
Updated: 2026-07-23T14:00:17.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42390 vulnerable 2026-07-29 00:49:31.916890 ZONEMD validation can be bypassed
MEDIUM (5.3)
An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation.
Published: 2026-06-25T13:01:08.394Z
Updated: 2026-06-25T14:25:44.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42389 vulnerable 2026-07-29 00:49:31.916756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42388 vulnerable 2026-07-29 00:49:31.916620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42387 vulnerable 2026-07-29 00:49:31.916398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40012 vulnerable 2026-07-29 00:46:21.307256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33612 vulnerable 2026-07-29 00:43:22.398057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33601 vulnerable 2026-06-08 07:59:10.422992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33600 vulnerable 2026-06-08 07:59:10.422422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33262 vulnerable 2026-06-08 07:59:09.446088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33261 vulnerable 2026-06-08 07:59:09.445799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33260 vulnerable 2026-06-08 07:59:09.445312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33259 vulnerable 2026-06-08 07:59:09.444691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33258 vulnerable 2026-06-08 07:59:09.444294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33257 vulnerable 2026-06-08 07:59:09.443726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-33256 vulnerable 2026-06-08 07:59:09.440847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24027 vulnerable 2026-06-08 07:51:16.589237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0398 vulnerable 2026-06-08 07:47:12.046799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59030 vulnerable 2026-06-08 07:35:19.916311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59029 vulnerable 2026-06-08 07:35:19.913357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59024 vulnerable 2026-06-08 07:35:19.907794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59023 vulnerable 2026-06-08 07:35:19.907299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30195 vulnerable 2026-06-08 07:16:59.226620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30192 not_vulnerable 2026-06-08 07:16:59.225373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25590 vulnerable 2026-06-08 06:31:23.316315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25583 vulnerable 2026-06-08 06:31:23.314543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50868 vulnerable 2026-06-08 06:16:16.900013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50387 vulnerable 2026-06-08 06:16:16.108005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26437 vulnerable 2026-06-08 05:57:39.646396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37428 vulnerable 2026-06-08 05:47:12.860388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27227 vulnerable 2026-06-08 05:41:55.035209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25829 vulnerable 2026-06-08 05:23:49.485484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14196 vulnerable 2026-06-08 05:19:22.684205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12244 vulnerable 2026-06-08 05:17:56.731510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10995 vulnerable 2026-06-08 05:16:36.177316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10030 vulnerable 2026-06-08 05:16:34.068310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3807 vulnerable 2026-06-08 05:13:56.071571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-3806 vulnerable 2026-06-08 05:13:56.071127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16855 vulnerable 2026-06-08 05:11:05.587321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14644 vulnerable 2026-06-08 05:10:53.194091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14626 vulnerable 2026-06-08 05:10:53.133582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10851 vulnerable 2026-06-08 05:10:37.187552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15120 vulnerable 2026-06-08 05:08:57.944093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15094 vulnerable 2026-06-08 05:08:57.831740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15093 vulnerable 2026-06-08 05:08:57.831408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15092 vulnerable 2026-06-08 05:08:57.831016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15090 vulnerable 2026-06-08 05:08:57.828613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7074 vulnerable 2026-06-08 05:08:11.703213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7073 vulnerable 2026-06-08 05:08:11.702653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7068 vulnerable 2026-06-08 05:08:11.696627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5470 vulnerable 2026-06-08 05:06:50.100447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8601 vulnerable 2026-06-08 05:06:09.697029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4010 vulnerable 2026-06-08 04:51:46.106556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4009 vulnerable 2026-06-08 04:51:46.096985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3217 vulnerable 2026-06-08 04:50:33.476555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1637 vulnerable 2026-06-08 04:50:21.175913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4252 vulnerable 2026-06-08 04:49:11.395058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4251 vulnerable 2026-06-08 04:49:11.388293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.