
Open Source Security mailing list@oss_security
Disclosure
PowerDNS Security Advisory 2026-10 for PowerDNS Recursor https://www.openwall.com/lists/oss-security/2026/07/22/6 CVE-2026-52688: RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation CVE-2026-62686: Wildcard CNAME proof validation bypass
Post summary
The advisory announces two DNSSEC bypass vulnerabilities in PowerDNS Recursor, detailing how RRSIGs with too few labels and wildcard CNAMEs can circumvent DNSSEC validation. No PoC, exploit, or patch information is provided in the excerpt.
00020391
4.7K followersView on X
