Recursor

This hub aggregates every CVE we track for Recursor, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Recursor.

• CVE-2026-33262Insufficient validation of cookie reply5.9Apr 22, 2026
• CVE-2026-33261Null pointer accces in aggressive NSEC(3) cache5.9Apr 22, 2026
• CVE-2026-33260Insufficient input validation of internal webserver5.3Apr 22, 2026
• CVE-2026-33259Concurrent modification of RPZ data can lead to denial of servce5.0Apr 22, 2026
• CVE-2026-33258Crafted zones can cause increased resource usage5.3Apr 22, 2026
• CVE-2026-33257Insufficient input validation of internal webserver5.3Apr 22, 2026
• CVE-2026-33256Unbounded memory allocation by internal web server5.3Apr 22, 2026
• CVE-2026-33601Insufficient validation of zonemd record4.4Apr 22, 2026
• CVE-2026-33600Null pointer dereference in RPZ transfer4.4Apr 22, 2026
• CVE-2025-59024Crafted delegations or IP fragments can poison cached delegations in Recursor6.5Feb 9, 2026
• CVE-2025-59023Crafted delegations or IP fragments can poison cached delegations in Recursor8.2Feb 9, 2026
• CVE-2026-24027Crafted zones can lead to increased incoming network traffic5.3Feb 9, 2026
• CVE-2026-0398Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor5.3Feb 9, 2026
• CVE-2025-59029Internal logic flaw in cache management can lead to a denial of service in PowerDNS Recursor5.3Dec 9, 2025
• CVE-2025-59030Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor7.5Dec 9, 2025