CVE-2026-52686 – Wildcard CNAME proof validation bypass

CVE ID :CVE-2026-52686

Published : July 23, 2026, 9:16 a.m. | 31 minutes ago

Description :The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when the wildcard answer is a CNAME or DNAME record.

Severity: 3.7 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…