Ghostwire

CVE-2026-33611: An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data,...

MEDIUM CVSS 5.5

Published: April 22, 2026 | Last Modified: April 22, 2026

Description

An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

References