CVE-2026-33611 — Insufficient validation of HTTPS and SVCB records

CVE-2026-33611

Insufficient validation of HTTPS and SVCB records PUBLISHED

Description (CNA)

An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.

Affected (CNA)

Vendor / product	Versions
PowerDNS / Authoritative	affected 5.0.0 before 5.0.4; affected 4.9.0 before 4.9.14

CWE

No CWE identifiers supplied.

References

https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.