CVE-2025-40778

—

CVSS 3.1

8.6 high

EPSS

<1%p50

Published

Oct 22, 2025 (Oct 22, 2025)

Modified

Jun 17, 2026

Description

Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.

Weakness: CWE-349
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news4 stories

Week in review: WSUS vulnerability exploited to drop Skuld infostealer, PoC for BIND 9 DNS flaw published

Help Net SecurityNov 2, 00:00 UTC · Nov 2, 2025Exploit / PoC CVE-2025-2783 CVE-2025-40778 CVE-2025-59287+1 CVEs1

PoC code drops for remotely exploitable BIND 9 DNS flaw (CVE-2025-40778)

Help Net SecurityOct 28, 00:00 UTC · Oct 28, 2025Exploit / PoC CVE-2025-40778

⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens

The Hacker NewsOct 27, 14:16 UTC · Oct 27, 2025Ransomware in the wildCVE-2025-59287 CVE-2025-54957 CVE-2025-6950+21 CVEs

Cache poisoning vulnerabilities found in 2 DNS resolving apps

Ars Technica · SecurityOct 22, 22:35 UTC · Oct 22, 2025Vulnerability CVE-2025-40778 CVE-2025-40780