Advisories

ISC BIND security advisory (AV26-1072)

Read at Canadian Centre for Cyber Security Alerts & Advisories

Product

BIND

EPSS

0.004 (p39)

Exposure class

Edge / VPN / firewall

• Canadian Centre for Cyber Security Alerts & Advisories (cyber.gc.ca)
• CVE-2026-19630 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-94300 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-96888 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-97313 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 46
   Ubuntu notice Ubuntu 11h ago

   Bind vulnerabilities

   CVE-2026-75029CVE-2026-19662CVE-2026-19668+15 more Canonical
2. 10
   CVE NVD 13d ago

   A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion…

   CVSS 7.5 CVE-2026-97313
3. 28
   CVE NVD 13d ago

   A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing…

   CVSS 7.5 CVE-2026-96888
4. 28
   CVE NVD 13d ago

   Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`".

   CVSS 8.1 CVE-2026-94300
5. 28
   CVE NVD 13d ago

   In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND.

   CVSS 7.5 CVE-2026-19630