← Database

CVE-2026-52686

LOW CVSS: 3.7 Published: 2026-07-23 Modified: 2026-07-23

Description

The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when the wildcard answer is a CNAME or DNAME record.

Affected Platforms

Unknown

Weakness Type

CWE-347

References