ISC has disclosed fourteen vulnerabilities in BIND 9 (CVE-2026-19033, CVE-2026-19662, CVE-2026-19666, CVE-2026-19667, CVE-2026-19668, CVE-2026-19941, CVE-2026-75029, CVE-2026-76163, CVE-2026-77119, CVE-2026-77692, CVE-2026-78301, CVE-2026-80274, CVE-2026-81563, CVE-2026-81736)
ISC discloses fourteen vulnerabilities in BIND 9 DNS software, including a use-after-free, with fixes now available.
On September 16, 2026, Internet Systems Consortium disclosed fourteen vulnerabilities affecting BIND 9, listing CVE-2026-19033, CVE-2026-19662, CVE-2026-19666 (use-after-free), CVE-2026-19667, CVE-2026-19668, CVE-2026-19941, CVE-2026-75029, CVE-2026-76163, CVE-2026-77119, CVE-2026-77692, CVE-2026-78301, CVE-2026-80274, CVE-2026-81563, and CVE-2026-81736. Details and fixes are published in the ISC knowledge base. No active exploitation is reported in the announcement.
- Fourteen CVEs disclosed simultaneously in BIND 9
- Includes a use-after-free vulnerability (CVE-2026-19666)
- ISC published fixes and knowledge base entries on the same day
- BIND 9 is widely deployed DNS server software
- CVEs
- CVE-2026-19033CVE-2026-19662CVE-2026-19666CVE-2026-19667CVE-2026-19668CVE-2026-19941CVE-2026-75029CVE-2026-76163CVE-2026-77119CVE-2026-77692CVE-2026-78301CVE-2026-80274CVE-2026-81563CVE-2026-81736
- Vendors
- Internet Systems Consortium
- Products
- BIND 9
- Organizations
- ISC
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-19666 | Use-After-Free DoS in ISC BIND 9 DNS64 Resolvers | 7.5 group max | — | ||
CVE-2026-77692+2 related CVEs | Unauthenticated DoS in ISC BIND 9 via crafted SIG(0) DNS-over-HTTPS requests | 7.5 group max | — |
From the original article
Posted by Nicki Křížek on Sep 16 On 16 September 2026, Internet Systems Consortium disclosed fourteen vulnerabilities affecting our BIND 9 software: https://kb. isc. org/docs/cve-2026-19033 https://kb.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.