https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:39:13 +0000 https://vulnerability.circl.lu/vuln/cve-2026-0397 <p><strong>Affected:</strong> PowerDNS DNSdist</p> <p>When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Resource Sharing (CORS) policy.</p> <p><strong>Affected:</strong> PowerDNS DNSdist</p> <p>When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Resource Sharing (CORS) policy.</p> https://vulnerability.circl.lu/vuln/cve-2026-0397 https://vulnerability.circl.lu/vuln/ghsa-gjv7-4r9p-7hmx <p>When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Resource Sharing (CORS) policy.</p> <p>When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Resource Sharing (CORS) policy.</p> https://vulnerability.circl.lu/vuln/ghsa-gjv7-4r9p-7hmx