CVE-2026-33610 — Possible file descriptor exhaustion in forward-dnsupdate

CVE-2026-33610

Possible file descriptor exhaustion in forward-dnsupdate PUBLISHED

Description (CNA)

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

Affected (CNA)

Vendor / product	Versions
PowerDNS / Authoritative	affected 5.0.0 before 5.0.4; affected 4.9.0 before 4.9.14

CWE

No CWE identifiers supplied.

References

https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.