3.7
CVE-2026-52686
- EPSS 0.11%
- Veröffentlicht 23.07.2026 08:03:37
- Zuletzt bearbeitet 23.07.2026 15:48:25
- CVE-Watchlists
- Unerledigt
Wildcard CNAME proof validation bypass
The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when the wildcard answer is a CNAME or DNAME record.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerPowerDNS
≫
Produkt
Recursor
Default Statusunaffected
Version
5.2.0
Version <
5.2.12
Status
affected
Version
5.3.0
Version <
5.3.9
Status
affected
Version
5.4.0
Version <
5.4.4
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.11% | 0.017 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security@open-xchange.com | 3.7 | 2.2 | 1.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
|
CWE-347 Improper Verification of Cryptographic Signature
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-10.html