https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:21:43.147267+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-52686 CVE-2026-52686 — Wildcard CNAME proof validation bypass 2026-10-02T10:21:43.161506+00:00

Affected: PowerDNS Recursor

The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when the wildcard answer is a CNAME or DNAME record.