CVE-2026-52686

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A DNSSEC validation bypass occurs when wildcard expansion proofs, specifically NSEC or NSEC3 records, are accepted without signature validation. This happens when the wildcard answer is a CNAME or DNAME record. DNSSEC (Domain Name System Security Extensions) is a suite of extensions that add a layer of security to the DNS protocol by enabling DNS responses to be digitally signed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.