CVE-2026-52690

Published: Jun 25, 2026Modified: Jun 25, 2026Deferred

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: security@open-xchange.com (Secondary)

Description

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail.

Related CWEs

CWE-290

Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (1)

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.html

Source: security@open-xchange.com

Timeline

No history available yet.