CVE-2026-33612
published 2026-06-25CVE-2026-33612: A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.
PriorityP343high7.5CVSS 3.1
AVNACHPRNUINSCCNIHAL
EPSS
0.15%
3.4th percentile
A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| powerdns | recursor | >= 5.2.0 < 5.2.11 | 5.2.11 |
| powerdns | recursor | >= 5.3.0 < 5.3.8 | 5.3.8 |
| powerdns | recursor | >= 5.4.0 < 5.4.3 | 5.4.3 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.
ghsa_unreviewed·2026-06-25
CVE-2026-33612 [HIGH] CWE-349 A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.
A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.
Red Hat
tempo-operator: Tempo Operator: Query RBAC bypass
vendor_redhat·2026-07-13·CVSS 6.5
CVE-2026-62147 [MEDIUM] CWE-863 tempo-operator: Tempo Operator: Query RBAC bypass
tempo-operator: Tempo Operator: Query RBAC bypass
The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some query API response paths when query RBAC was enabled, allowing an authenticated user to read span attributes belonging to other tenants' namespaces.
Statement: This affects Red Hat OpenShift distributed tracing platform deployments with the Tempo Operator's query RBAC feature enabled prior to tempo-operator.v0.21.0-2, which corrects the gateway's authorization handling; the fix has already shipped to customers via RHSA-2026:33612.
Mitigation: There is no mitigation or workaround other than upgrading to tempo-operator.v0.21.0-2 (or later); until upgraded, administrators requiring strict namespace isolation of trace data should not rely o
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-33612 pdns-recursor: ZoneToCache can poison the cache [fedora-all]
bugzilla·2026-06-26·CVSS 7.5
CVE-2026-33612 [HIGH] CVE-2026-33612 pdns-recursor: ZoneToCache can poison the cache [fedora-all]
CVE-2026-33612 pdns-recursor: ZoneToCache can poison the cache [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
FEDORA-2026-088b60c071 (pdns-recursor-5.4.3-1.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-088b60c071
Bugzilla
CVE-2026-33612 pdns-recursor: ZoneToCache can poison the cache
bugzilla·2026-06-25·CVSS 7.5
CVE-2026-33612 [HIGH] CVE-2026-33612 pdns-recursor: ZoneToCache can poison the cache
CVE-2026-33612 pdns-recursor: ZoneToCache can poison the cache
A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.
2026-06-25
Published