Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default). This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-22 | 4 | Disclosure3Patch1 |
| 2026-07-23 | 3 | Disclosure1Patch2 |
| 2026-08-14 | 3 | Patch3 |
| 2026-08-17 | 2 | Patch2 |
【注意喚起】（緊急）BIND 9.xの脆弱性（DNSキャッシュポイズニングの危険性）について（CVE-2026-11721） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-07-23-bind9-vuln-wildcard.html
Post summary
The text discloses CVE‑2026‑11721 as a DNS cache poisoning issue in BIND 9.x and urges a version upgrade, without mentioning exploit code or active exploitation.
【自分用メモ】BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)と修正バージョン(9.20.26, 9.21.24) https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/
Post summary
The note lists several BIND 9 CVEs, notes that versions 9.20.26 and 9.21.24 patch them, and provides a link to a security summary page.
( ꒪⌓꒪)…灼熱の特大号 New BIND 9 releases: 9.20.26, 9.21.24 https://lists.isc.org/pipermail/bind-announce/2026-July/001299.html https://kb.isc.org/docs/cve-2026-10723 https://kb.isc.org/docs/cve-2026-10822 https://kb.isc.org/docs/cve-2026-11331 https://kb.isc.org/docs/cve-2026-11605 https://kb.isc.org/docs/cve-2026-11622 https://kb.isc.org/docs/cve-2026-11721 https://kb.isc.org/docs/cve-2026-12617 https://kb.isc.org/docs/cve-2026-13204 https://kb.isc.org/docs/cve-2026-13321
Post summary
The post announces BIND 9 releases that address several CVEs and links to vendor KB pages, indicating that patches are available, but no technical details or exploitation evidence are provided.
BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/
Post summary
The post announces a set of new BIND 9 vulnerabilities, listing their CVE identifiers and severity ratings, making it a disclosure notice.
RHSA-2026:54509 - bind9.16 security update (RHEL8) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54509
Post summary
Red Hat issued a security update for bind9 16, offering patches for multiple CVEs, with no evidence of PoC, exploit, or active exploitation.
RHSA-2026:54654 - bind security update (RHEL8) - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54654
Post summary
Red Hat’s Security Advisory RHSA-2026:54654 announces patches for five bind-related CVEs in RHEL8, but provides no detail on exploits, PoCs, or technical specifics.
RHSA-2026:54510 - bind security update (RHEL9) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54510
Post summary
Red Hat released the RHEL9 security update RHSA‑2026:54510 to patch six CVEs, but no proof of concept, exploit code, or active exploitation details are included.
RHSA-2026:55437 - bind security update (RHEL10) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:55437
Post summary
Red Hat issues a security update (RHSA‑2026:55437) that addresses six CVEs, indicating a patch is available but providing no exploitation details.
The severity is increased for this new vulnerability affecting ISC BIND (CVE-2026-11721) https://vuldb.com/vuln/382359
Post summary
The post announces an increase in severity for the newly discovered CVE-2026-11721 (ISC BIND) but provides no further technical or actionable details.
RHSA-2026:55442 - bind9.18 security update (RHEL9) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:55442
Post summary
Red Hat released a security update (RHSA-2026:55442) for RHEL 9 bind9, addressing six CVEs; the advisory notes the patch but provides no exploit or technical details.
🚨*CVE* CVE-2026-11721 It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This caus… https://www.cve.org/CVERecord?id=CVE-2026-11721 ----- Traducción: CVE-2026-11721 Es … http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑11721, outlining a DNS RRSIG label mismatch vulnerability without providing any PoC, exploit code, patch, or evidence of active exploitation.
CVE-2026-11721 It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This caus… https://www.cve.org/CVERecord?id=CVE-2026-11721
Post summary
The tweet presents a DNS RRSIG label count mismatch vulnerability (CVE-2026-11721) and links to the official CVE record.