CVE-2026-24029 in PowerDNS DNSdist
요약 (영어)
When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.
예약하다
2026. 01. 20.
공개
2026. 03. 31.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354381 | PowerDNS DNSdist early_acl_drop 원격 코드 실행 | 정의되지 않음 | 공식 수정 | CVE-2026-24029 |