CVE-2026-33261 - Null pointer accces in aggressive NSEC(3) cache

MEDIUM

Null pointer accces in aggressive NSEC(3) cache

Published Apr 22, 2026

5.9

MEDIUM

CVSS 3.1

EPSS 0.23%

A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
PowerDNS	Recursor	unaffected	Affected ≥ 5.2.0, < 5.2.9 ≥ 5.3.0, < 5.3.6 ≥ 5.4.0, < 5.4.1

No remediation recorded yet.

Weaknesses (1)

CWE-353

Link	Providers	Tags
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-03.html		Broken LinkVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24727		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner OX

Published Apr 22, 2026

Updated Apr 22, 2026

Reserved Mar 18, 2026

CISA Vulnrichment

Updated Apr 22, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner OX

Published Apr 22, 2026

Updated Apr 22, 2026

GitHub

No data