CVE-2026-40012 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
OX	CNA	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 24.24%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
powerdns	recursor	5.2.0 ≤ 𝑥 < 5.2.11	CNA
powerdns	recursor	5.3.0 ≤ 𝑥 < 5.3.8	CNA
powerdns	recursor	5.4.0 ≤ 𝑥 < 5.4.3	CNA

Debian Releases

Debian Product

Codename

pdns-recursor

bookworm	vulnerable
bookworm (security)	vulnerable
bullseye	vulnerable
forky	5.4.4-1 fixed
sid	5.4.5-1 fixed
trixie	5.2.11-0+deb13u1 fixed
trixie (security)	5.2.13-0+deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

pdns-recursor

bionic	needs-triage
focal	needs-triage
jammy	needs-triage
noble	needs-triage
questing	ignored
resolute	needs-triage

Common Weakness Enumeration

CWE-524 - Use of Cache Containing Sensitive Information
The code uses a cache that contains sensitive information, but the cache can be read by an actor outside of the intended control sphere.

Vulnerability Media Exposure

[GERMAN] PowerDNS: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PowerDNS ausnutzen, um Denial-of-Service-Zustände herbeizuführen, DNS-Caches zu manipulieren, Sicherheitsprüfungen zu umgehen, vertrauliche Informationen offenzulegen, DNSSEC-Validierungen zu beeinträchtigen oder die Integrität und Verfügbarkeit der DNS-Auflösung zu beeinflussen.
Published: 2026-06-25T22:00:00+00:00

References

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.html