PowerDNS Recursor 5.3.12 and 5.4.8 fix multiple flaws
Original title: PowerDNS Security Advisory 2026-12 for PowerDNS Recursor: Multiple issues
Advisory 2026-12 covers three high-severity CVEs; only CVE-2026-73206 is named in the notice.
PowerDNS released Recursor 5.3.12 and 5.4.8 on October 21 to fix Security Advisory 2026-12. The advisory covers several CVEs: three rated high and the rest medium or low. The only issue described in the available text is CVE-2026-73206, in which a crafted DNS packet can cause a denial condition. Exploitation is not discussed.
Unconfirmed: The mailing-list text is cut off after "denial," and the other CVE identifiers are not included.
- Fixed Recursor versions are 5.3.12 and 5.4.8.
- Three associated CVEs are rated high; others are medium or low.
- CVE-2026-73206 involves a crafted DNS packet.
Impact: crafted DNS packet can cause a denial condition
| Product | Affected | Fixed in |
|---|---|---|
| PowerDNS Recursor | — | 5.3.12 and 5.4.8 |
- 1.Upgrade PowerDNS Recursor to 5.3.12 or 5.4.8.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-73206 | — | — | — |
From the original article
Posted by Otto Moerbeek on Oct 21 Today we have released PowerDNS Recursor 5. 3. 12 and 5.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.