An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP.Referenceshttps://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-08.html