https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T19:22:46.900633+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-40011 CVE-2026-40011 — Prometheus denial of service via crafted DNS queries 2026-09-30T19:22:46.905924+00:00

Affected: PowerDNS DNSdist

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.