PowerDNS-Admin

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

PowerDNS-Admin records in CISA KEV

No PowerDNS-Admin vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-83132 CVE-2026-119658 · GHSA-7x9g-4g72-fhmf

Authorization bypass in PowerDNS-Admin lets users refresh other zones

MEDIUM 57

PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to refresh secondary zones they cannot access by supplying a different 'domain' field in the JS…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00414 Published 2026-10-30 No fix listed CWE-639

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0