CVE-2026-42396: Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
Published May 21, 2026
·Updated
Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
Affected Software
2 affected components
PowerDNS Authoritative>=4.7.0<4.9.15
PowerDNS Authoritative>=5.0.0<5.0.5
Event History
May 21, 2026
CVE Published
via MITRE·09:25 AM
Data Sourced
via MITRE·09:25 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-42396?
CVE-2026-42396 has a medium severity rating of 6.5.
2
What is the risk associated with CVE-2026-42396?
The risk associated with CVE-2026-42396 is categorized as 40.
3
How does CVE-2026-42396 affect PowerDNS Authoritative?
CVE-2026-42396 may cause catalog zone transfers to fail due to insufficient validation of member zone data.
4
What is the potential impact of CVE-2026-42396?
The potential impact of CVE-2026-42396 includes the possibility of disrupted catalog zone transfers, which could impair DNS functionality.
5
How do I mitigate CVE-2026-42396?
To mitigate CVE-2026-42396, ensure that you validate member zone data properly in your PowerDNS Authoritative configurations.