CVE-2026-40011 — Prometheus denial of service via crafted DNS queries

CVE-2026-40011

Prometheus denial of service via crafted DNS queries PUBLISHED

Description (CNA)

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

Affected (CNA)

Vendor / product	Versions
PowerDNS / DNSdist	affected 1.9.0 before 1.9.15; affected 2.0.0 before 2.0.7

CWE

No CWE identifiers supplied.

References

https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.