Known vulnerabilities in PowerDNS Recursor 5.4.0-alpha1

Version: 5.4.0-alpha1
Software CPE: cpe:2.3:a:powerdns_com_b_v:powerdns_recursor:*:*:*:*:*:*:*:*
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PowerDNS Recursor version 5.4.0-alpha1 PowerDNS Recursor 5.4.0-alpha1 is affected by 16 vulnerabilities: 11 medium, 5 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139170 - Insufficient Verification of Data Authenticity
CVE-2026-52688
CWE-345 Medium
No
No
5.2.12, 5.3.9, 5.4.4 22.07.2026 SB2026072289
SB2026072439
#VU139171 - Insufficient Verification of Data Authenticity
CVE-2026-52686
CWE-345 Low
No
No
5.2.12, 5.3.9, 5.4.4 22.07.2026 SB2026072289
SB2026072439
#VU135395 - Improper input validation
CVE-2026-42389
CWE-20 Low
No
No
5.4.3 25.06.2026 SB20260625205
#VU135382 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-33612
CWE-349 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135383 - Exposure of resource to wrong sphere
CVE-2026-40012
CWE-668 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135384 - Insufficient Verification of Data Authenticity
CVE-2026-42390
CWE-345 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135385 - Improper input validation
CVE-2026-42388
CWE-20 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135386 - Improper input validation
CVE-2026-42387
CWE-20 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU135387 - Authentication Bypass by Spoofing
CVE-2026-52690
CWE-290 Medium
No
No
5.2.11, 5.3.8, 5.4.3 25.06.2026 SB20260625205
SB2026062611
#VU126845 - Allocation of Resources Without Limits or Throttling
CVE-2026-33256
CWE-770 Medium
No
No
5.3.6, 5.4.1 22.04.2026 SB20260422205
#VU126847 - Allocation of Resources Without Limits or Throttling
CVE-2026-33258
CWE-770 Medium
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU126848 - Use After Free
CVE-2026-33259
CWE-416 Low
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU126850 - Missing Support for Integrity Check
CVE-2026-33261
CWE-353 Medium
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU126851 - NULL Pointer Dereference
CVE-2026-33262
CWE-476 Medium
No
No
5.4.1 22.04.2026 SB20260422205
#VU126852 - NULL Pointer Dereference
CVE-2026-33601
CWE-476 Low
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114
#VU126853 - NULL Pointer Dereference
CVE-2026-33600
CWE-476 Low
No
No
5.2.9, 5.3.6, 5.4.1 22.04.2026 SB20260422205
SB20260513114