PowerDNS-Admin vulnerabilities

CVEs whose affected-version data names the PowerDNS-Admin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119658Medium· 4.3PoC

1w ago

PowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update

PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to refresh secondary zones they cannot access by supplying a different 'domain' field in the JSON body. Attacker…

▾ TwilightPowerDNS-Admin · PowerDNS-AdminEPSS 0.41%via CVEORG