FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

PowerDNS Recursor -- multiple vulnerabilities

Affected packages
		powerdns-recursor	<	5.4.4

Details

VuXML ID	575ddefc-9085-11f1-b295-98b78501ef2a
Discovery	2026-07-22
Entry	2026-08-05

PowerDNS Team reports:

CVE-2026-52688: RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

CVE-2026-52686: Wildcard CNAME proof validation bypass¶

[source]

References

CVE Name	CVE-2026-52686
CVE Name	CVE-2026-52868
URL	https://nvd.nist.gov/vuln/detail/CVE-2026-52686
URL	https://nvd.nist.gov/vuln/detail/CVE-2026-52688