CVE-2026-42390

An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - security@open-xchange.com

Published

2026-06-25

Last modified

2026-10-25

Weaknesses

CWE-20

Affected products

• Recursor (Powerdns)

References

• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.html