Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-27 | 1 | General1 |
| 2026-07-28 | 1 | Disclosure1 |
【注意喚起】PowerDNS Recursorの脆弱性情報が公開されました（CVE-2026-52688、CVE-2026-52686） https://jprs.jp/tech/security/2026-07-27-powerdns-recursor.html
Post summary
A notice confirms that information on PowerDNS Recursor vulnerabilities (CVE‑2026‑52688, CVE‑2026‑52686) has been published, but no details on exploitation, patches, or PoCs are provided.
PowerDNS Security Advisory 2026-10 for PowerDNS Recursor https://www.openwall.com/lists/oss-security/2026/07/22/6 CVE-2026-52688: RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation CVE-2026-62686: Wildcard CNAME proof validation bypass
Post summary
PowerDNS releases a security advisory with detailed technical information on two CVEs that allow bypassing DNSSEC wildcard validation via RRSIG label counts and wildcard CNAME proof validation.