CVE Explorer
CVE-2026-47693
Poweradmin is a web-based DNS administration tool for PowerDNS server. Versions prior to 4.2.4 and 4.3.3 are vulnerable to CSV Injection (Formula Injection) in its log export functionality. User-controlled data — specifically the username field — is written to exported CSV files without sanitizing formula trigger characters (=, +, -, @). When an administrator exports activity logs and opens the resulting CSV in a spreadsheet application (Microsoft Excel, LibreOffice Calc, Google Sheets), any for
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"poweradmin","vendor":"poweradmin","versions":[{"status":"affected","version":"< 4.2.4"},{"status":"affected","version":">= 4.3.0, < 4.3.3"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:4468cab985e862e8979f7e2df71f12de5fde5ddbb8460f26089c797bced121e4 · sha256:4a09ca1d4d06558b… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:4468cab985e862e8979f7e2df71f12de5fde5ddbb8460f26089c797bced121e4 · sha256:4a09ca1d4d06558b… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-1236","description":"CWE-1236: Improper Neutralization of Formula Elements in a CSV File","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:4468cab985e862e8979f7e2df71f12de5fde5ddbb8460f26089c797bced121e4 · sha256:4a09ca1d4d06558b… · /containers/cna/problemTypes/0/descriptions/0
Source references
4 source assertions{"name":"https://github.com/poweradmin/poweradmin/releases/tag/v4.2.4","tags":["x_refsource_MISC"],"url":"https://github.com/poweradmin/poweradmin/releases/tag/v4.2.4"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4468cab985e862e8979f7e2df71f12de5fde5ddbb8460f26089c797bced121e4 · sha256:4a09ca1d4d06558b… · /containers/cna/references/1
{"name":"https://github.com/poweradmin/poweradmin/releases/tag/v4.3.3","tags":["x_refsource_MISC"],"url":"https://github.com/poweradmin/poweradmin/releases/tag/v4.3.3"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4468cab985e862e8979f7e2df71f12de5fde5ddbb8460f26089c797bced121e4 · sha256:4a09ca1d4d06558b… · /containers/cna/references/2
{"tags":["exploit"],"url":"https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3h6h-67x3-cv5x"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4468cab985e862e8979f7e2df71f12de5fde5ddbb8460f26089c797bced121e4 · sha256:4a09ca1d4d06558b… · /containers/adp/0/references/0
{"name":"https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3h6h-67x3-cv5x","tags":["x_refsource_CONFIRM"],"url":"https://github.com/poweradmin/poweradmin/security/advisories/GHSA-3h6h-67x3-cv5x"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4468cab985e862e8979f7e2df71f12de5fde5ddbb8460f26089c797bced121e4 · sha256:4a09ca1d4d06558b… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.