CVE-2026-24029 in DNSdist
Сводка (Английский)
When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Резервировать
20.01.2026
Раскрытие
31.03.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354381 | PowerDNS DNSdist early_acl_drop Удалённое выполнение кода | Не определено | Официальное исправление | CVE-2026-24029 |