A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24727
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-03.html