CVE-2026-19666

Vendor

Canonical

Product

BIND

CVSS

7.5

EPSS

0.005 (p41)

Exposure class

Operating system, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 46
   Ubuntu notice Ubuntu 12h ago

   Bind vulnerabilities

   It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…

   CVE-2026-75029CVE-2026-19662CVE-2026-19668+15 more Canonical
2. 22
   CVE NVD 16 Sep 2026

   On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named`…

   On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0…

   CVSS 7.5 CVE-2026-19666