Findings

CVE-2026-33610

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

Published Apr 22, 2026 · updated Jun 17, 2026 · powerdns authoritative

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 22, 2026 · NIST NVD

    Detected

    A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

Affected

  • cpe powerdns/authoritativeversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-33610

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-33610

    A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

    nvd.nist.gov

References