CVE-2026-52684 – Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack

CVE ID :CVE-2026-52684

Published : July 23, 2026, 9:16 a.m. | 31 minutes ago

Description :If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the
child records are used immediately if not expired and thus valid, or the
records are expired, and in that case not used. So this case
can only happen if almost expired records are used to refresh the
authoritative NS records.

Severity: 3.7 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…