https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-02T08:52:32.349377+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-119658 fkie_cve-2026-119658 2026-11-02T08:52:32.374192+00:00

PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to refresh secondary zones they cannot access by supplying a different 'domain' field in the JSON body. Attackers authorized for any one zone can force axfr-retrieve transfers of other users' secondary zones and infer zone existence from differing responses.

 https://db.gcve.eu/vuln/ghsa-7x9g-4g72-fhmf GHSA-7x9g-4g72-fhmf 2026-11-02T08:52:32.374271+00:00

PowerDNS-Admin through 2026.08.1 contains an authorization bypass vulnerability that allows authenticated User-role accounts to refresh secondary zones they cannot access by supplying a different 'domain' field in the JSON body. Attackers authorized for any one zone can force axfr-retrieve transfers of other users' secondary zones and infer zone existence from differing responses.