CVE-2026-0397
Low
Description
When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Resource Sharing (CORS) policy.
SeverityLow
CVSS3.1
Exploit probability—
ProductPowerdns Dnsdist
PublishedMar 31, 2026
First seenMar 31, 2026
Weakness typeCWE-942CWE-942
How to fix
Update
- powerdns dnsdist1.9.12, 2.0.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| powerdns dnsdist | 1.9.0 ≤ v < 1.9.12, 2.0.0 ≤ v < 2.0.3 | 1.9.12, 2.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.