CVE-2026-52690

{
  "id": "CVE-2026-52690",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-25T14:16:45.450",
  "lastModified": "2026-10-25T23:10:00.167",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail."
    },
    {
      "lang": "es",
      "value": "La suplantación de respuestas al Recursor podría marcar una IP de un servidor autoritativo como que no soporta EDNS, causando que la validación de los registros DNSSEC servidos por ese servidor falle."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "PowerDNS",
          "product": "Recursor",
          "defaultStatus": "unaffected",
          "collectionURL": "https://repo.powerdns.com/",
          "packageName": "pdns-recursor",
          "modules": [
            "Outgoing EDNS handling"
          ],
          "programFiles": [
            "syncres.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "versions": [
            {
              "version": "5.2.0",
              "lessThan": "5.2.11",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "5.3.0",
              "lessThan": "5.3.8",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "5.4.0",
              "lessThan": "5.4.3",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-25T14:21:31.973756Z",
          "id": "CVE-2026-52690",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-290"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.html",
      "source": "[email protected]"
    }
  ]
}