CVE-2026-33610Disclosure(powerdns / authoritative)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

powerdns CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html

Weakness type (CWE)

CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

authoritative

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

powerdns

Products

authoritative

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds171d
General
CVE-2026-33610 Denial of Service via File Descriptor Exhaustion in PowerDNS Secondary S... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33610 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces a newly identified Denial-of-Service vulnerability in PowerDNS Secondary, linking to a reporting site but providing no PoC, exploit, or patch information.
0000046
4.0K followersView on X
CVE@CVEnew171d
Disclosure
CVE-2026-33610 A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it. https://www.cve.org/CVERecord?id=CVE-2026-33610
Post summary
The text explains how a rogue PowerDNS primary server can exhaust file descriptors in a secondary server, leading to a denial of service, and provides a link to the CVE record.
0000069
57.2K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	powerdns	authoritative	-	-	-

Explore more

Back to dashboard powerdns CVEs authoritative vulnerabilities