Known vulnerabilities in PowerDNS Recursor 5.2.0-alpha1

Version: 5.2.0-alpha1
Software CPE: cpe:2.3:a:powerdns_com_b_v:powerdns_recursor:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PowerDNS Recursor version 5.2.0-alpha1 PowerDNS Recursor 5.2.0-alpha1 is affected by 23 vulnerabilities: 19 medium, 4 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139170 - Insufficient Verification of Data Authenticity
CVE-2026-52688
CWE-345 Medium
No
No
5.2.12, 5.3.9, 5.4.4 22.07.2026 SB2026072289
SB2026072439
#VU139171 - Insufficient Verification of Data Authenticity
CVE-2026-52686
CWE-345 Low
No
No
5.2.12, 5.3.9, 5.4.4 22.07.2026 SB2026072289
SB2026072439
#VU135382 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-33612
CWE-349 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135383 - Exposure of resource to wrong sphere
CVE-2026-40012
CWE-668 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135384 - Insufficient Verification of Data Authenticity
CVE-2026-42390
CWE-345 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135385 - Improper input validation
CVE-2026-42388
CWE-20 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135386 - Improper input validation
CVE-2026-42387
CWE-20 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135387 - Authentication Bypass by Spoofing
CVE-2026-52690
CWE-290 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135238 - Allocation of Resources Without Limits or Throttling
CVE-2026-42005
CWE-770 Medium
No
No
5.2.11 25.06.2026 SB2026062580
SB20260625152
SB20260625205
and 8 more
#VU126846 - Allocation of Resources Without Limits or Throttling
CVE-2026-33257
CWE-770 Medium
No
No
5.2.9 22.04.2026 SB20260422205
SB20260422221
SB2026042356
and 4 more
#VU126847 - Allocation of Resources Without Limits or Throttling
CVE-2026-33258
CWE-770 Medium
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU126848 - Use After Free
CVE-2026-33259
CWE-416 Low
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU126849 - Allocation of Resources Without Limits or Throttling
CVE-2026-33260
CWE-770 Medium
No
No
5.2.9 22.04.2026 SB20260422205
SB20260422221
SB2026042356
and 4 more
#VU126850 - Missing Support for Integrity Check
CVE-2026-33261
CWE-353 Medium
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU126852 - NULL Pointer Dereference
CVE-2026-33601
CWE-476 Low
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU126853 - NULL Pointer Dereference
CVE-2026-33600
CWE-476 Low
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU122485 - Resource exhaustion
CVE-2026-0398
CWE-400 Medium
No
No
5.1.10, 5.2.8, 5.3.5 09.02.2026 SB2026020963
SB20260213149
SB20260625279
and 3 more
#VU122484 - Resource exhaustion
CVE-2026-24027
CWE-400 Medium
No
No
5.1.10, 5.2.8, 5.3.5 09.02.2026 SB2026020963
SB20260213149
#VU119298 - Improper input validation
CVE-2025-59030
CWE-20 Medium
No
No
5.1.9, 5.2.7, 5.3.3 08.12.2025 SB2025120857
SB20251210188
SB2026040358
and 1 more
#VU117537 - Insufficient Verification of Data Authenticity
CVE-2025-59024
CWE-345 Medium
No
No
5.1.8, 5.2.6, 5.3.1 22.10.2025 SB20251022166
SB2025103002
SB20260625279
and 3 more


Showing elements 1 - 20 out of 23