Search: CVE-2026-27854

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.5%	CVE-2026-27854PowerDNS DNSdist · Use After Free Medium4.8EPSS 0.5%2026-03-31CVE Database V5CVE-2026-27854 An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code. In some cases DNSQuestion:getEDNSOptions might refer to a version of the DNS packet that has been modified, thus triggering a use-after-free and potentially a crash resulting in denial of service. EPSS 0.5%Vulnerability CWE-416	CVE Database V5	2026-03-31

Page 1 of 1