CVE-2026-40011

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html

Configurations

No configuration.

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Un atacante enviando un gran número de consultas DNS manipuladas podría ser capaz de desencadenar la inserción de un bloqueo dinámico con un valor que cause la producción de una salida inválida en el endpoint de Prometheus. El endpoint de Prometheus será entonces rechazado por el scraper hasta que el bloqueo dinámico expire.

Information

Published : 2026-06-25 13:16

Updated : 2026-10-25 23:10

NVD link : CVE-2026-40011

Mitre link : CVE-2026-40011

CVE.ORG link : CVE-2026-40011

JSON object : View

Products Affected

No product.

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2026-40011", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40011", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-25T13:23:09.989984Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@open-xchange.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security@open-xchange.com", "affectedData": [{"repo": "https://github.com/PowerDNS/pdns", "vendor": "PowerDNS", "modules": ["Prometheus export"], "product": "DNSdist", "versions": [{"status": "affected", "version": "1.9.0", "lessThan": "1.9.15", "versionType": "semver"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.7", "versionType": "semver"}], "packageName": "dnsdist", "programFiles": ["dnsdist-web.cc"], "collectionURL": "https://repo.powerdns.com/", "defaultStatus": "unaffected"}]}], "published": "2026-06-25T13:16:39.323", "references": [{"url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html", "source": "security@open-xchange.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires."}, {"lang": "es", "value": "Un atacante enviando un gran n\u00famero de consultas DNS manipuladas podr\u00eda ser capaz de desencadenar la inserci\u00f3n de un bloqueo din\u00e1mico con un valor que cause la producci\u00f3n de una salida inv\u00e1lida en el endpoint de Prometheus. El endpoint de Prometheus ser\u00e1 entonces rechazado por el scraper hasta que el bloqueo din\u00e1mico expire."}], "lastModified": "2026-10-25T23:10:00.167", "sourceIdentifier": "security@open-xchange.com"}