CVE-2026-52686Disclosure

LOWCVSS 3.7 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when the wildcard answer is a CNAME or DNAME record.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-347

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-27: 107-27
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • 日本レジストリサービス(JPRS)@JPRS_official
    Disclosure

    【注意喚起】PowerDNS Recursorの脆弱性情報が公開されました(CVE-2026-52688、CVE-2026-52686) https://jprs.jp/tech/security/2026-07-27-powerdns-recursor.html

    Post summary

    PowerDNS Recursor vulnerability information for CVE-2026-52688 and CVE-2026-52686 has been publicly disclosed via a JPRS advisory link, but no PoC, exploit code, active exploitation, patch, or technical details are presented in the text.

    03070514
    1.3K followersView on X

Explore more