PT-2026-51607 · Power Admin · Poweradmin

Published 2026-06-23 · Updated 2026-06-23 · CVE-2026-54588

Mitre

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 use the attacker-controlled HTTP HOST request header as the authoritative source for building callback URLs in its OIDC, SAML, and logout authentication flows without any validation. An unauthenticated attacker can poison the redirect uri sent to the Identity Provider, causing the IdP to redirect the victim's authorization code to an attacker-controlled server - resulting in full account takeover with no credentials required. Versions 4.2.4 and 4.3.3 patch the issue.

Fix

Open Redirect

RCE

Weakness Enumeration

CWE-601

CWE-20

Related Identifiers

CVE-2026-54588

Affected Products

Poweradmin

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-54588 · Security Note
• https://github.com/poweradmin/poweradmin/releases/tag/v4.2.4 · Note
• https://github.com/poweradmin/poweradmin/releases/tag/v4.3.3 · Note
• https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3735-5339-xfwx · Note