BaselineWatch
58800 CVEs · 135 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known58,800 New, 24 h663 Changed, 24 h823 In KEV135 Public exploit1,592 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2026-33257 7.5 high 1.0% powerdns, authoritative, dnsdist, recursor An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. Mon 26 Oct
CVE-2026-33258 7.5 high 1.0% powerdns, recursor By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches. Mon 26 Oct
CVE-2026-33260 7.5 high 1.0% powerdns, authoritative, dnsdist, recursor An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. Mon 26 Oct
CVE-2026-33256 7.5 high 1.0% powerdns, recursor An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. Mon 26 Oct
CVE-2026-33600 4.9 medium 1.0% powerdns, recursor An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Mon 26 Oct
CVE-2026-33601 4.9 medium 1.0% powerdns, recursor If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Mon 26 Oct
CVE-2026-33261 5.9 medium 0.00% powerdns, recursor A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service. Mon 26 Oct
CVE-2026-33262 5.9 medium 0.00% powerdns, recursor An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default. Mon 26 Oct
CVE-2026-42387 5.9 medium 0.00% no CPE yet A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation. Sun 25 Oct
CVE-2026-52690 5.9 medium 0.00% no CPE yet Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail. Sun 25 Oct
CVE-2026-33259 5.0 medium 0.00% powerdns, recursor Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor. Normally concurrent transfers of the same RPZ zone can only occur with a malfunctioning RPZ provider. Mon 26 Oct
CVE-2026-42254 4.0 medium 0.00% no CPE yet Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross-zone poisoning because cached data is not directly associated with a query that triggered a response. Mon 26 Oct

12 of 12

Download these 12 as CSV · subscribe to this list.

EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.