5.9
CVE-2026-42388
- EPSS 0.4%
- Veröffentlicht 25.06.2026 12:59:38
- Zuletzt bearbeitet 25.06.2026 16:16:35
- Quelle security@open-xchange.com
- CVE-Watchlists
- Unerledigt
Missing input validation for catalog zones
Incomplete validation of the SOA record present in a catalog zone might lead to a crash.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerPowerDNS
≫
Produkt
Recursor
Default Statusunaffected
Version
5.2.0
Version <
5.2.11
Status
affected
Version
5.3.0
Version <
5.3.8
Status
affected
Version
5.4.0
Version <
5.4.3
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.4% | 0.319 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security@open-xchange.com | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.html