Spoofing Vulnerability in PowerDNS Recursor Affects DNSSEC Validation
CVE-2026-52690

5.9MEDIUM

Key Information:

Vendor

Powerdns

Status
Recursor
Vendor
CVE Published:
25 June 2026

What is CVE-2026-52690?

A vulnerability exists in PowerDNS Recursor that permits attackers to spoof replies from an authoritative server. This can cause the Recursor to erroneously mark the IP address of the server as not supporting EDNS (Extension Mechanisms for DNS). Consequently, this misclassification may hinder the validation of DNSSEC records served by that server, posing risks to the integrity of DNS-related operations.

Affected Version(s)

Recursor 5.2.0 < 5.2.11

Recursor 5.3.0 < 5.3.8

Recursor 5.4.0 < 5.4.3

References

https://docs.powerdns.com/recursor/security-advisories/po...

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mehtab Zafar
.