CVE-2026-52686

The CVE-2026-52686 entry describes a DNSSEC validation bypass in wildcard proof handling: when a wildcard expansion yields a CNAME or DNAME, NSEC/NSEC3 proofs are accepted without signature validation. This concerns the DNS resolver logic (noted in the PowerDNS advisory) and can bypass proper DNS...

EUVD-2026-47931

The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...