First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-42396

MediumCVSS 6.5/10Last modified Jul 23, 2026

Description

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
PowerDNS	Authoritative	>= 4.9.0, < 4.9.15; >= 5.0.0, < 5.0.5

References

https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-06.htmlBroken Link

Timeline

Published: May 21, 2026
Last modified: Jul 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-423976.5Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130 CVE-2026-423987.7Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-confi CVE-2026-423996.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated l CVE-2026-42407.5A vulnerability was determined in Open5GS up to 2.7.6. The affected element is the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b_aaa_cb/smf_s CVE-2026-424006.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated u CVE-2026-424015.4Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection. A user with write access t CVE-2026-424027.5Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization. Specially crafted WS-Polic CVE-2026-424037.5Apache Neethi does not properly detect circular references in policy definitions. When a WS-Policy document contains circular policy referen CVE-2026-424047.2Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API. When CVE-2026-424068.7A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager CVE-2026-424084.4When BIG-IP DNS is provisioned, a vulnerability exists in an undisclosed TMOS Shell (tmsh) command that may allow a highly privileged authen CVE-2026-424097.5When an HTTP/2 profile and an iRule containing the HTTP::redirect or HTTP::respond command are configured on a virtual server, undisclosed r

CVE-2026-42396: Medium severity, CVSS 6.5 | Vulnix