poweradmin

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

poweradmin records in CISA KEV

No poweradmin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pa Server Monitor 1 record LOW

Records

3 records

TI-2026-35197 CVE-2026-47693 · GHSA-3h6h-67x3-cv5x

Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications

MEDIUM 64

Poweradmin is a web-based DNS administration tool for PowerDNS server.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00375 Published 2026-06-23 Fixed in 4.2.4, 4.3.3 CWE-1236

TI-2026-39423 CVE-2026-54588 · GHSA-3735-5339-xfwx

Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.

MEDIUM 42

Poweradmin is a web-based DNS administration tool for PowerDNS server.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00543 Published 2026-06-23 Fixed in 4.2.4, 4.3.3 CWE-20

TI-2021-08462 CVE-2021-26844 · GHSA-q62q-pmx4-qxxf

A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1…

LOW 26

A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script or HTML via Console.exe.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00692 Published 2021-11-05 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0