Findings

CVE-2026-33262

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.

Published Apr 22, 2026 · updated Jun 17, 2026 · powerdns recursor

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 22, 2026 · NIST NVD

    Detected

    An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

  2. Jun 17, 2026 · NIST NVD

    Updated

    An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

Affected

  • cpe powerdns/recursorversion unspecified
  • cpe powerdns/recursor5.4.0

Sources

  • CVE.orgVulnerability recordCVE-2026-33262

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-33262

    An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

    nvd.nist.gov

References