Skip to content

CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-07-23
Updated: 2026-07-23
Assigning organization: OX

Description

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS Recursor

Default version status: unaffected

5.2.0 to < 5.2.12affected
5.3.0 to < 5.3.9affected
5.4.0 to < 5.4.4affected

References

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-10.html ↗