Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-52690

Spoofed answers can mark an authoritative non-EDNS capable

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS Recursor

Default version status: unaffected

  • 5.2.0 to < 5.2.11affected
  • 5.3.0 to < 5.3.8affected
  • 5.4.0 to < 5.4.3affected

References