CVE-2026-94300

Vendor

Canonical

Product

BIND

CVSS

8.1

EPSS

0.005 (p41)

Exposure class

Operating system, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 46
   Ubuntu notice Ubuntu 12h ago

   Bind vulnerabilities

   It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…

   CVE-2026-75029CVE-2026-19662CVE-2026-19668+15 more Canonical
2. 28
   CCCS advisory CCCS 13d ago

   ISC BIND security advisory (AV26-1072)

   CVE-2026-19630CVE-2026-94300CVE-2026-96888+1 more
3. 28
   CVE NVD 13d ago

   Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`".

   Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted…

   CVSS 8.1 CVE-2026-94300