CVE-2026-52688

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation PUBLISHED

Description (CNA)

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

Vendor / product	Versions
PowerDNS / Recursor	affected 5.2.0 before 5.2.12; affected 5.3.0 before 5.3.9; affected 5.4.0 before 5.4.4

No CWE identifiers supplied.

CISA-ADP

No English description supplied.

No references supplied.