Back to Feed
VulnerabilitiesSep 17, 2026

ISC Patches 14 Vulnerabilities in BIND 9 Security Update

ISC releases BIND 9 security update patching 14 vulnerabilities, 7 critical, causing DoS.

Internet Systems Consortium (ISC) has released security updates for BIND, addressing 14 vulnerabilities. Seven of these are high-severity flaws that could lead to denial-of-service conditions through unexpected program exits, memory exhaustion, or termination of the named process. One critical vulnerability, CVE-2026-77692, can be exploited remotely with a single crafted DNS-over-HTTPS request.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run ISC?

Get an email when a new story names ISC, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

ISC's release of patches for 14 BIND 9 vulnerabilities — including one critical flaw exploitable with a single crafted DNS-over-HTTPS request — highlights the persistent risk posed by unpatched DNS infrastructure. BIND is one of the most widely deployed DNS server implementations in the world, making these flaws a high-priority concern for internet-facing environments. The high-severity denial-of-service vulnerabilities can cause memory exhaustion or process termination, potentially disrupting name resolution for entire networks or services. Delayed patching of critical infrastructure components like DNS servers leaves organizations exposed to both opportunistic and targeted attacks. Because DNS is foundational to nearly all network operations, even brief outages can cascade into significant service disruptions and business impact.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • cve — CVE-2026-80274
  • cve — CVE-2026-76163
  • cve — CVE-2026-19666
  • cve — CVE-2026-81563
  • cve — CVE-2026-77692
  • cve — CVE-2026-19667
  • cve — CVE-2026-81736

Entities

BIND 9 (product)ISC (vendor)DNS (technology)DNS-over-HTTPS (technology)