7.5
CVE-2026-52688
- EPSS 0.13%
- Veröffentlicht 23.07.2026 08:03:58
- Zuletzt bearbeitet 23.07.2026 15:48:25
- CVE-Watchlists
- Unerledigt
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerPowerDNS
≫
Produkt
Recursor
Default Statusunaffected
Version
5.2.0
Version <
5.2.12
Status
affected
Version
5.3.0
Version <
5.3.9
Status
affected
Version
5.4.0
Version <
5.4.4
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.027 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security@open-xchange.com | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
|
CWE-295 Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
CWE-345 Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-10.html