These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-42396 is a medium-severity availability issue in DNS catalog zone handling. Based on the public CVE metadata, insufficient validation of member zone data may cause a catalog zone transfer to fail. NVD references a PowerDNS security advisory, but the supplied corpus does not provide enough detail to confirm product scope beyond that pointer.
CVE-2026-42002 is a medium-severity vulnerability description centered on concurrency and locking defects in GSS-TSIG. The available record indicates a network-reachable issue with high attack complexity and an availability impact only, which points to denial-of-service risk rather than confidentiality or integrity compromise. NVD shows the record as "Received" and references a PowerDNS security advisory, [truncated]
CVE-2026-42000 is a medium-severity DNS vulnerability described as insufficient validation of names during AXFR, the zone-transfer process used by authoritative DNS servers. The available corpus points to a PowerDNS security advisory, but the vendor mapping in the source data is still low-confidence and should be treated as provisional.
CVE-2026-41999 was published on 2026-05-21 and describes incorrect behavior of views when handling TCP PROXY requests. The available corpus is limited, but the NVD record links to an official PowerDNS advisory, so PowerDNS appears to be the likely affected project while the vendor attribution remains low confidence. The NVD-assigned CVSS vector indicates network exposure with low confidentiality and integ [truncated]
CVE-2026-27853 is a MEDIUM severity vulnerability in Powerdns Dnsdist that could allow an attacker to trigger an out-of-bounds write via crafted DNS responses. The vulnerability exists in the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. A successful exploit could lead to a crash resulting in denial of service. Users of affected versions should review and apply patches or mi [truncated]
CVE-2026-24030 is a denial-of-service vulnerability in DNSdist, a DNS load balancer and traffic management tool. An attacker could potentially exploit this vulnerability by sending crafted DNS over QUIC or DNS over HTTP/3 payloads, leading to excessive memory allocation and potentially causing the system to enter an out-of-memory state. This vulnerability is particularly concerning for system administrato [truncated]
CVE-2026-24029 is a MEDIUM severity vulnerability in Powerdns Dnsdist. The early_acl_drop option is disabled by default on a DNS over HTTPs frontend using the nghttp2 provider, allowing all clients to send DoH queries regardless of the configured ACL. This could potentially bypass access controls and allow unauthorized access to DNS services. Users of Powerdns Dnsdist should be aware of this vulnerability [truncated]
CVE-2026-24028 is a medium-severity vulnerability in Powerdns Dnsdist that allows for out-of-bounds reads, potentially leading to denial of service or information disclosure. The vulnerability is triggered by sending a crafted DNS response packet when custom Lua code uses newDNSPacketOverlay to parse DNS packets. This issue affects Powerdns Dnsdist versions 1.9.0-1.9.12 and 2.0.0-2.0.3. Users of these ver [truncated]
CVE-2026-0396 is a low-severity vulnerability in PowerDNS's DNSdist, allowing an attacker to inject HTML content into the internal web dashboard by sending crafted DNS queries when domain-based dynamic rules are enabled. The vulnerability has a CVSS score of 3.1 and exists when domain-based dynamic rules are enabled via either DynBlockRulesGroup:setSuffixMatchRule or DynBlockRulesGroup:setSuffixMatchRuleF [truncated]