Threats affecting pkg:github/powerdns-admin/PowerDNS-Admin

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-119658PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role Medium5.32026-10-30GCVE DatabaseCVE-2026-119658 PowerDNS-Admin versions up to 2026.08.1 have an authorization bypass vulnerability. Authenticated users with User-role privileges can refresh secondary DNS zones they are not authorized to access by manipulating the 'domain' field in the JSON request body. This allows attackers with access to any one zone to trigger zone transfers (axfr-retrieve) of other users' secondary zones and potentially infer the existence of those zones based on response differences. Report on CVE-2026-119658 Vulnerability CWE-639 #ghsa-7x9g-4g72-fhmf	GCVE Database	2026-10-30

Page 1 of 1