Vulnerability in Powerdns Recursor

CVE-2026-52684

If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus…

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

References

Frequently asked questions

What is CVE-2026-52684?
CVE-2026-52684 is a low-severity vulnerability in Powerdns Recursor. CVSS score: 3.7/10. Published 2026-07-23.
How severe is CVE-2026-52684?
Low severity. CVSS v3 base score is 3.7 out of 10.