6.5
CVE-2026-42396
- EPSS 0.35%
- Veröffentlicht 21.05.2026 10:16:25
- Zuletzt bearbeitet 26.05.2026 19:19:42
- Quelle security@open-xchange.com
- CVE-Watchlists
- Unerledigt
Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Powerdns ≫ Authoritative Version >= 4.7.0 < 4.9.15
Powerdns ≫ Authoritative Version >= 5.0.0 < 5.0.5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.271 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| security@open-xchange.com | 4.9 | 1.2 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
|
CWE-94 Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-06.html