VulnSocial

CVE-2026-10723Patch

LOWCVSS 6.8 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Back to dashboard
0.8/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-347

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 16 mentions across 8 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 8 signals
  • Technical details provided in 3 signals
  • General: 6 classified signals
  • Disclosure: 3 classified signals
  • Peaked 7d ago at 4 mentions (2026-07-22); latest day: 2
  • 16 total mentions across 8 days

Deep dive

Activity timeline16 mentions / 8d
01234Mentions · 2026-07-22: 4Mentions · 2026-07-23: 2Mentions · 2026-07-26: 1Mentions · 2026-07-27: 2Mentions · 2026-07-28: 1Mentions · 2026-07-29: 1Mentions · 2026-08-14: 3Mentions · 2026-08-17: 2Patch / Workaround · 2026-07-22: 1Patch / Workaround · 2026-07-23: 2Patch / Workaround · 2026-08-14: 3Patch / Workaround · 2026-08-17: 2Technical Details · 2026-07-22: 2Technical Details · 2026-07-23: 107-2207-2307-2607-2707-2807-2908-1408-17
Signal classification3 categories
Patch
743.8%
General
637.5%
Disclosure
318.8%
Referenced assets22 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-224
Disclosure2General1Patch1
2026-07-232
Disclosure1Patch1
2026-07-261
General1
2026-07-272
General2
2026-07-281
General1
2026-07-291
General1
2026-08-143
Patch3
2026-08-172
Patch2
Full discourse16 posts
  • 日本レジストリサービス（JPRS）@JPRS_official
    Patch

    【注意喚起】BIND 9.xの脆弱性（名前解決の妨害）について（CVE-2026-10723） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-07-23-bind9-vuln-nsec3.html

    Post summary

    The advisory alerts that BIND 9.x is affected by CVE-2026-10723, a name‑resolution interference issue, and strongly recommends upgrading to a patched version.

    06080586
    1.3K followersView on X
  • Yasuhiro Morishita@OrangeMorishita
    Disclosure

    【自分用メモ】BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)と修正バージョン(9.20.26, 9.21.24) https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/

    Post summary

    The memo documents several high‑severity BIND 9 CVEs and the corresponding patched releases, providing a concise update for internal reference.

    12080922
    4.6K followersView on X
  • Yu F@fj_twt
    Patch

    ( ꒪⌓꒪)…灼熱の特大号 New BIND 9 releases: 9.20.26, 9.21.24 https://lists.isc.org/pipermail/bind-announce/2026-July/001299.html https://kb.isc.org/docs/cve-2026-10723 https://kb.isc.org/docs/cve-2026-10822 https://kb.isc.org/docs/cve-2026-11331 https://kb.isc.org/docs/cve-2026-11605 https://kb.isc.org/docs/cve-2026-11622 https://kb.isc.org/docs/cve-2026-11721 https://kb.isc.org/docs/cve-2026-12617 https://kb.isc.org/docs/cve-2026-13204 https://kb.isc.org/docs/cve-2026-13321

    Post summary

    The tweet announces new BIND 9 releases that address multiple CVEs, linking to ISC KB pages for patch details, but it contains no proof‑of‑concept, exploit code, or active exploitation information.

    01180835
    1.6K followersView on X
  • Kazuki Omo@omokazuki
    General

    BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/

    Post summary

    The post lists multiple BIND 9 CVEs with severity designations and links to a page for more information, but it provides no further technical or exploitation details.

    02040332
    372 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:54509 - bind9.16 security update (RHEL8) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54509

    Post summary

    The advisory announces a security update for bind9.16 on RHEL8, referencing multiple CVEs and linking to the RedHat errata, but it offers no technical exploitation details or evidence of active use.

    11011123
    117 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-10723 BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versio… https://www.cve.org/CVERecord?id=CVE-2026-10723

    Post summary

    The post announces CVE-2026-10723, detailing that BIND 9 can accept malformed child‑zone NSEC3 records, potentially enabling forged authenticated NXDOMAIN responses.

    000311.5K
    58.1K followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:54654 - bind security update (RHEL8) - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54654

    Post summary

    The advisement announces a Red Hat security update for RHEL8 that addresses multiple CVEs affecting bind; it does not discuss exploitation or provide technical vulnerability details.

    1001058
    117 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:54510 - bind security update (RHEL9) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54510

    Post summary

    Red Hat has released a security update addressing several CVEs with the 54510 errata; it provides a patch but no proofs of exploit, active exploitation, or detailed vulnerability specifics.

    1001061
    117 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:55437 - bind security update (RHEL10) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:55437

    Post summary

    Red Hat has released a security update for RHEL10, addressing six CVEs such as CVE-2026-11331 and CVE-2026-13321. The erratum confirms that fixes are applied but contains no further exploit or technical details.

    1000043
    117 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:55442 - bind9.18 security update (RHEL9) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:55442

    Post summary

    Red Hat issued a bind9.18 security update for RHEL9 that patches six CVEs; no PoC, exploit details, or active exploitation information is provided.

    0000037
    117 followersView on X
  • ゆぅさん@YY20424277
    General

    もし自分の現場で「ISC BINDにおける複数の脆弱性（2026年7月）（CVE-2026-10723）」が起きたら、最初の一手は何ですか? →背景/目的/効果の3軸でfirst-stepを整理しました。 #セキュリティ #インシデント対応 ▶ 無料トレーニング: https://www.intect-i.jp/training/free/?utm_source=sns&utm_medium=social&utm_campaign=free_training

    Post summary

    The post merely poses a question about initial incident‑response actions for a newly disclosed ISC BIND CVE and links to a training resource, offering no evidence of exploitation, patching, or detailed vulnerability data.

    0000053
    839 followersView on X
  • ゆぅさん@YY20424277
    General

    もし自分の現場で「ISC BINDにおける複数の脆弱性（2026年7月）（CVE-2026-10723）」が起きたら、最初の一手は何ですか? →背景/目的/効果の3軸でfirst-stepを整理しました。 #セキュリティ #インシデント対応 ▶ 無料トレーニング: https://www.intect-i.jp/training/free/?utm_source=sns&utm_medium=social&utm_campaign=free_training

    Post summary

    The post poses a question about responding to CVE-2026-10723 and links to free training but lacks technical, exploit, or patch details.

    0000071
    839 followersView on X
  • ゆぅさん@YY20424277
    General

    「ISC BINDにおける複数の脆弱性（2026年7月）（CVE-2026-10723）」をボードに上げるなら1ページでどう書く? 背景/目的/効果の3軸で要約しました。 #セキュリティ #経営報告 ▶ 無料プログラム: https://www.intect-i.jp/local-program/?utm_source=sns&utm_medium=social&utm_campaign=local_program

    Post summary

    The tweet only mentions CVE‑2026‑10723 in the context of a board discussion, providing no technical, exploit, or mitigation details.

    0000058
    841 followersView on X
  • ゆぅさん@YY20424277
    General

    【3軸解説】「ISC BINDにおける複数の脆弱性（2026年7月）（CVE-2026-10723）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis

    Post summary

    The post offers a brief three‑axis analysis of the ISC BIND vulnerability CVE‑2026‑10723 but provides neither technical details, PoC, exploit code, or patch information.

    0000050
    841 followersView on X
  • ゆぅさん@YY20424277
    General

    「ISC BINDにおける複数の脆弱性（2026年7月）（CVE-2026-10723）」をボードに上げるなら1ページでどう書く? 背景/目的/効果の3軸で要約しました。 #セキュリティ #経営報告 ▶ 無料プログラム: https://www.intect-i.jp/local-program/?utm_source=sns&utm_medium=social&utm_campaign=local_program

    Post summary

    The post references CVE-2026-10723 but only in a general context, asking how to summarize it for a board, with no additional technical details or actionable information.

    0000068
    843 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-10723 BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versio… https://www.cve.org/CVERecord?id=CVE-2026-10723 ----- Traducción: CVE-2026-10723 BIN… http://infoflow.cloud`

    Post summary

    The message announces CVE-2026-10723, noting a BIND vulnerability that could let attackers forge authenticated NXDOMAIN responses via incorrect NSEC3 records.

    0000028
    94 followersView on X

Explore more

Back to dashboard