CVE-2026-52688

HighCVSS 7.5/10Last modified Oct 24, 2026

Description

RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-295CWE-345

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Jul 23, 2026
Last modified
Oct 24, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-52699.8In Ciena's Navigator Network Control Suite (NCS) and Manage Control Plan (MCP), there are hidden system accounts used for internal software CVE-2026-526905.9Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records servedCVE-2026-526918.8** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ApacheCVE-2026-526927.5Unauthenticated Sensitive Data Exposure in Affiliates Manager <= 2.9.50 versions.CVE-2026-526939.3Unauthenticated SQL Injection in eCommerce Product Catalog <= 3.5.5 versions.CVE-2026-526947.5Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions.CVE-2026-526957.5Unauthenticated Sensitive Data Exposure in ABC Crypto Checkout <= 1.8.2 versions.CVE-2026-526967.5Unauthenticated Sensitive Data Exposure in JetBlog <= 2.4.8 versions.CVE-2026-526978.5Subscriber SQL Injection in Taskbuilder <= 5.0.7 versions.CVE-2026-526987.4Subscriber Sensitive Data Exposure in PushEngage – Web Push Notifications, eCommerce Automation &amp; Chat Widget <= 4.2.3 versions.CVE-2026-526997.5Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 versions.CVE-2026-52709.8An authentication bypass vulnerability exists in certain releases of Ciena Navigator Network Control Suite (NCS), Manage Control Plan (MCP),
CVE-2026-52688: High severity, CVSS 7.5 | Vulnix