CVE-2026-33596 is a low-severity vulnerability affecting DNS query routing systems that use TCP-only or DNS over TLS backends. An attacker with adjacent network access could potentially cause a mismatch between queries sent to a backend and their corresponding responses by flooding the system with precisely timed queries, leading to a denial of service condition. The vulnerability requires high attack complexity and direct network access, resulting in a CVSS score of 3.1 with no impact to confidentiality or integrity. This vulnerability is not currently listed on the KEV catalog and shows minimal exploitation risk with an EPSS score of 0.00005, indicating it is extremely unlikely to be exploited in the wild. There is currently no active community attention or known exploit code associated with this CVE, and it remains in an inactive status relative to broader threat landscapes.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.9.0, < 1.9.13CPE match | cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:* | ||
>= 2.0.0, < 2.0.4CPE match | cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.