CVE-2026-42390

EUVD-2026-39359
An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
OXCNA
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 22.74%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
powerdnsrecursor
5.4.0 ≤
𝑥
< 5.4.3
CNA
Debian logo
Debian Releases
Debian Product
Codename
pdns-recursor
bookworm
vulnerable
bookworm (security)
vulnerable
forky
5.4.9-1
fixed
sid
5.4.9-1
fixed
trixie
5.2.13-0+deb13u1
fixed
trixie (security)
5.2.13-0+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
pdns-recursor
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
xenial
needs-triage
Common Weakness Enumeration
References
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.html