CVE-2026-42002Disclosure(powerdns / authoritative)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Concurrency and locking defects in GSS-TSIG

powerdns CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-06.html

Weakness type (CWE)

CWE-364

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

authoritative

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Disclosure: 3 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-05-25); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

powerdns

Products

authoritative

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets1 URL

By indicator

https://jprs.jp/tech/security/2026-05-25-powerdns-auth.html

Classification over time

Date	Total	Labels

2026-05-21	1	General1
2026-05-25	2	Disclosure2
2026-05-26	1	Disclosure1

Full discourse4 posts

日本レジストリサービス（JPRS）@JPRS_official138d
Disclosure
【注意喚起】PowerDNS Authoritative Serverの脆弱性情報が公開されました（CVE-2026-42002、他4件） https://jprs.jp/tech/security/2026-05-25-powerdns-auth.html
Post summary
A notice announcing that vulnerability information for PowerDNS Authoritative Server, including CVE-2026-42002, has been published, but no technical specifics, PoC, patches, or exploitation details are provided.
02061980
1.3K followersView on X
ohhara_P🧐Slow life in the isekai@ohhara_shiojiri138d
Disclosure
PowerDNS Authoritative Serverの脆弱性情報が公開されました（CVE-2026-42002、他4件） https://jprs.jp/tech/security/2026-05-25-powerdns-auth.html
Post summary
The text announces that vulnerability information for PowerDNS Authoritative Server (CVE-2026-42002 and four other CVEs) has been published, providing a link to the full advisory.
0001076
2.0K followersView on X
Yasuhiro Morishita@OrangeMorishita142d
General
CVE-2026-41999 CVE-2026-42000 CVE-2026-42001 CVE-2026-42002 CVE-2026-42396 の5件。
Post summary
The content simply lists five CVE identifiers without any additional context.
00010329
4.5K followersView on X
珈琲好き@likecoffee137d
Disclosure
PowerDNS Authoritative Serverの脆弱性情報が公開されました（CVE-2026-42002、他4件） https://jprs.jp/tech/security/2026-05-25-powerdns-auth.html #%E6%8A%80%E8%A1%93%E7%B3%BB-%E8%B3%87%E6%96%99 #feedly
Post summary
The post announces the publication of vulnerability information for PowerDNS Authoritative Server, including CVE‑2026‑42002, but provides no additional technical, exploitation, or mitigation details.
0000059
1.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	powerdns	authoritative	-	-	-

Explore more

Back to dashboard powerdns CVEs authoritative vulnerabilities

What researchers are saying

CVE-2026-42002

ohhara_P🧐Slow life in the isekai[verified]@ohhara_shiojiriDisclosure

The text announces that vulnerability information for PowerDNS Authoritative Server (CVE-2026-42002 and four other CVEs) has been published, providing a link to the full advisory.

Yasuhiro Morishita[verified]@OrangeMorishitaGeneral

The content simply lists five CVE identifiers without any additional context.

珈琲好き[verified]@likecoffeeDisclosure

The post announces the publication of vulnerability information for PowerDNS Authoritative Server, including CVE‑2026‑42002, but provides no additional technical, exploitation, or mitigation details.

日本レジストリサービス（JPRS）@JPRS_officialDisclosure

A notice announcing that vulnerability information for PowerDNS Authoritative Server, including CVE-2026-42002, has been published, but no technical specifics, PoC, patches, or exploitation details are provided.