<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: powerdns-recursor</title><description>Every new CVE for powerdns-recursor.</description><link>https://agentprime.io/</link><item><title>CVE-2026-52688: RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation</title><link>https://agentprime.io/advisories/CVE-2026-52688/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52688/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 08:03:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-52686: Wildcard CNAME proof validation bypass</title><link>https://agentprime.io/advisories/CVE-2026-52686/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52686/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 08:03:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-52684: Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack</title><link>https://agentprime.io/advisories/CVE-2026-52684/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52684/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 07:49:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42389: Reject more queries with invalid header values</title><link>https://agentprime.io/advisories/CVE-2026-42389/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42389/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 13:16:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-52690: Spoofed answers can mark an authoritative non-EDNS capable</title><link>https://agentprime.io/advisories/CVE-2026-52690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-52690/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 13:01:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42390: ZONEMD validation can be bypassed</title><link>https://agentprime.io/advisories/CVE-2026-42390/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42390/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 13:01:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42388: Missing input validation for catalog zones</title><link>https://agentprime.io/advisories/CVE-2026-42388/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42388/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 12:59:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42387: Insufficient input validation in ZoneToCache</title><link>https://agentprime.io/advisories/CVE-2026-42387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42387/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 12:59:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-40012: Information about ECS zero scoped answers might leak to clients that use a specific ECS</title><link>https://agentprime.io/advisories/CVE-2026-40012/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-40012/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 12:58:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33612: ZoneToCache can poison the cache</title><link>https://agentprime.io/advisories/CVE-2026-33612/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33612/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 12:58:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33262: Insufficient validation of cookie reply</title><link>https://agentprime.io/advisories/CVE-2026-33262/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33262/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:40:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33261: Null pointer accces in aggressive NSEC(3) cache</title><link>https://agentprime.io/advisories/CVE-2026-33261/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33261/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:40:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33260: Insufficient input validation of internal webserver</title><link>https://agentprime.io/advisories/CVE-2026-33260/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33260/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:39:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33259: Concurrent modification of RPZ data can lead to denial of servce</title><link>https://agentprime.io/advisories/CVE-2026-33259/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33259/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:38:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33258: Crafted zones can cause increased resource usage</title><link>https://agentprime.io/advisories/CVE-2026-33258/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33258/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:38:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33257: Insufficient input validation of internal webserver</title><link>https://agentprime.io/advisories/CVE-2026-33257/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33257/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:37:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33256: Unbounded memory allocation by internal web server</title><link>https://agentprime.io/advisories/CVE-2026-33256/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33256/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:37:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33601: Insufficient validation of zonemd record</title><link>https://agentprime.io/advisories/CVE-2026-33601/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33601/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:37:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33600: Null pointer dereference in RPZ transfer</title><link>https://agentprime.io/advisories/CVE-2026-33600/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33600/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 22 Apr 2026 09:33:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59024: Crafted delegations or IP fragments can poison cached delegations in Recursor</title><link>https://agentprime.io/advisories/CVE-2025-59024/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59024/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 14:44:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59023: Crafted delegations or IP fragments can poison cached delegations in Recursor</title><link>https://agentprime.io/advisories/CVE-2025-59023/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59023/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 14:44:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24027: Crafted zones can lead to increased incoming network traffic</title><link>https://agentprime.io/advisories/CVE-2026-24027/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24027/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 14:25:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-0398: Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor</title><link>https://agentprime.io/advisories/CVE-2026-0398/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-0398/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 09 Feb 2026 14:20:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59029: Internal logic flaw in cache management can lead to a denial of service in PowerDNS Recursor</title><link>https://agentprime.io/advisories/CVE-2025-59029/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59029/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 09:16:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59030: Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor</title><link>https://agentprime.io/advisories/CVE-2025-59030/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59030/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 09:15:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-30192: A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts</title><link>https://agentprime.io/advisories/CVE-2025-30192/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-30192/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 21 Jul 2025 12:49:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-30195: A crafted zone can lead to an illegal memory access in the PowerDNS Recursor</title><link>https://agentprime.io/advisories/CVE-2025-30195/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-30195/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Apr 2025 13:24:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-25590: Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor</title><link>https://agentprime.io/advisories/CVE-2024-25590/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-25590/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Oct 2024 15:29:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-25583: Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured</title><link>https://agentprime.io/advisories/CVE-2024-25583/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-25583/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Apr 2024 09:45:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-26437: Deterred spoofing attempts can lead to authoritative servers being marked unavailable</title><link>https://agentprime.io/advisories/CVE-2023-26437/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-26437/</guid><description>CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Apr 2023 14:37:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-15094: Memory leak in PowerDNS Recursor</title><link>https://agentprime.io/advisories/CVE-2017-15094/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-15094/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-15093: Improper input validation in PowerDNS Recursor</title><link>https://agentprime.io/advisories/CVE-2017-15093/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-15093/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-15092: Cross-site scripting in PowerDNS Recursor</title><link>https://agentprime.io/advisories/CVE-2017-15092/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-15092/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 23 Jan 2018 15:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>