CVE-2026-52690 — Spoofed answers can mark an authoritative non-EDNS capable

CVE-2026-52690

Spoofed answers can mark an authoritative non-EDNS capable PUBLISHED

Description (CNA)

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail.

Affected (CNA)

Vendor / product	Versions
PowerDNS / Recursor	affected 5.2.0 before 5.2.11; affected 5.3.0 before 5.3.8; affected 5.4.0 before 5.4.3

CWE

No CWE identifiers supplied.

References

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.