Poweradmin

Platform

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

June 25, 2026

Last Seen

June 25, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

Critical Host Header Injection Vulnerability in Poweradmin (CVE-2026-54588)

Jun 25·1 sources

Related Articles (1)

CVE-2026-54588: Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction. [CRITICAL] CVSS 9.6 Exploit Intelligence — Recent CVEs / 23h Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacker-controlled `HTTP_HOST` request header as the authoritative source for building callback URLs in its OIDC, SAML, and logout authentication flows without any validation. An unauthe

exploit-intel.com·Jun 25

Related Entities

Data Breach CVE-2026-54588 CWE-287 - Improper Authentication CWE-601 - Open Redirect PowerDNS