Threats tagged 'ghsa-5xwv-8qfq-c8x7'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-125378PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for Medium5.32026-11-10GCVE DatabaseCVE-2026-125378 PowerDNS-Admin versions before 2026.11.0 have a missing authorization vulnerability in the apply_records handler for /admin/template/<template>/apply. This flaw allows any authenticated user with User-role privileges to modify shared zone templates by replacing a template's DNS records with attacker-chosen NS, MX, A, or CNAME records. This can affect every DNS zone created from the compromised template. Report on CVE-2026-125378 Vulnerability CWE-862 #ghsa-5xwv-8qfq-c8x7	GCVE Database	2026-11-10

Page 1 of 1