CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

Score

CVSS 3.1 7.5 High

Status

Awaiting Analysis - security@open-xchange.com

Published

2026-07-23

Last modified

2026-10-24

Weaknesses

CWE-295, CWE-345

Affected products

• Recursor (Powerdns)

References

• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-10.html