CVE-2026-52690

Spoofed answers can mark an authoritative non-EDNS capable

Medium · published June 25, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
35.7
In the wild
Unconfirmed
What it is

Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00425 · 35.7th percentile
Published
2026-06-25T13:01Z
EPSS history
Timeline
  • 25 JUN 13:01Z
    Spoofed answers can mark an authoritative non-EDNS capable
    cvelistv5