Recursor

This hub aggregates every CVE we track for Recursor, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Recursor.

• CVE-2026-52688RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation7.5Jul 23, 2026
• CVE-2026-52686Wildcard CNAME proof validation bypass3.7Jul 23, 2026
• CVE-2026-52684Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack3.7Jul 23, 2026
• CVE-2026-42389Reject more queries with invalid header values5.3Jun 25, 2026
• CVE-2026-52690Spoofed answers can mark an authoritative non-EDNS capable5.9Jun 25, 2026
• CVE-2026-42390ZONEMD validation can be bypassed5.3Jun 25, 2026
• CVE-2026-42388Missing input validation for catalog zones5.9Jun 25, 2026
• CVE-2026-42387Insufficient input validation in ZoneToCache5.9Jun 25, 2026
• CVE-2026-40012Information about ECS zero scoped answers might leak to clients that use a specific ECS5.3Jun 25, 2026
• CVE-2026-33612ZoneToCache can poison the cache7.5Jun 25, 2026
• CVE-2026-33262Insufficient validation of cookie reply5.9Apr 22, 2026
• CVE-2026-33261Null pointer accces in aggressive NSEC(3) cache5.9Apr 22, 2026
• CVE-2026-33260Insufficient input validation of internal webserver5.3Apr 22, 2026
• CVE-2026-33259Concurrent modification of RPZ data can lead to denial of servce5.0Apr 22, 2026
• CVE-2026-33258Crafted zones can cause increased resource usage5.3Apr 22, 2026