TUX.RE Forum

PowerDNS Security Updates – Authoritative Server and Recursor Vulnerabilities Explained

PowerDNS has released important security updates affecting both the Authoritative Server and the Recursor. These vulnerabilities are relevant for administrators running DNS infrastructure, especially public DNS services, hosting environments, and recursive resolvers.

Affected Components

There are two main components:

• PowerDNS Authoritative Server – serves DNS zones
• PowerDNS Recursor – resolves DNS queries for clients

Both components are widely used but serve different purposes, and both have received security fixes.

---

Affected CVEs

This update covers multiple vulnerabilities, including:

• CVE-2026-33257
• CVE-2026-33258
• CVE-2026-33259
• CVE-2026-33260
• CVE-2026-33261
• CVE-2026-33600
• CVE-2026-33601
• CVE-2026-33608
• CVE-2026-33609
• CVE-2026-33610
• CVE-2026-33611

Some vulnerabilities affect both components, while others are specific to either the Authoritative Server or the Recursor.

---

What are…login to view the rest of this post