Vulnerabilities

TI-2026-39423 CVE-2026-54588 · GHSA-3735-5339-xfwx

Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.

MEDIUM 42

Poweradmin is a web-based DNS administration tool for PowerDNS server.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00543 Published 2026-06-23 Fixed in 4.2.4, 4.3.3 CWE-20

TI-2026-35197 CVE-2026-47693 · GHSA-3h6h-67x3-cv5x

Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications

MEDIUM 64

Poweradmin is a web-based DNS administration tool for PowerDNS server.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00375 Published 2026-06-23 Fixed in 4.2.4, 4.3.3 CWE-1236

TI-2021-08462 CVE-2021-26844 · GHSA-q62q-pmx4-qxxf

A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1…

LOW 26

A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script or HTML via Console.exe.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00692 Published 2021-11-05 No fix listed CWE-79

Vulnerabilities

Filters

Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.

Poweradmin: CSV Injection in log export endpoints allows formula execution in spreadsheet applications

A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1…