VulnSocial

CVE-2026-13204Patch

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 12 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 8 signals
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 4d ago at 4 mentions (2026-07-22); latest day: 2
  • 12 total mentions across 5 days

Deep dive

Activity timeline12 mentions / 5d
01234Mentions · 2026-07-22: 4Mentions · 2026-07-23: 2Mentions · 2026-08-03: 1Mentions · 2026-08-14: 3Mentions · 2026-08-17: 2Patch / Workaround · 2026-07-22: 1Patch / Workaround · 2026-07-23: 2Patch / Workaround · 2026-08-14: 3Patch / Workaround · 2026-08-17: 2Technical Details · 2026-07-22: 307-2207-2308-0308-1408-17
Signal classification3 categories
Patch
866.7%
Disclosure
325.0%
General
18.3%
Referenced assets20 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-224
Disclosure2General1Patch1
2026-07-232
Patch2
2026-08-031
Disclosure1
2026-08-143
Patch3
2026-08-172
Patch2
Full discourse12 posts
  • Yasuhiro Morishita@OrangeMorishita
    Patch

    【自分用メモ】BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)と修正バージョン(9.20.26, 9.21.24) https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/

    Post summary

    A personal memo lists BIND 9 CVEs with their severity, notes the patched versions 9.20.26 and 9.21.24, and links to an advisory page.

    12080922
    4.6K followersView on X
  • Yu F@fj_twt
    Patch

    ( ꒪⌓꒪)…灼熱の特大号 New BIND 9 releases: 9.20.26, 9.21.24 https://lists.isc.org/pipermail/bind-announce/2026-July/001299.html https://kb.isc.org/docs/cve-2026-10723 https://kb.isc.org/docs/cve-2026-10822 https://kb.isc.org/docs/cve-2026-11331 https://kb.isc.org/docs/cve-2026-11605 https://kb.isc.org/docs/cve-2026-11622 https://kb.isc.org/docs/cve-2026-11721 https://kb.isc.org/docs/cve-2026-12617 https://kb.isc.org/docs/cve-2026-13204 https://kb.isc.org/docs/cve-2026-13321

    Post summary

    ISC released new BIND 9 versions to patch multiple CVEs, with links to detailed advisories.

    01180835
    1.6K followersView on X
  • 日本レジストリサービス（JPRS）@JPRS_official
    Patch

    【注意喚起】（緊急）BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2026-13204） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-07-23-bind9-vuln-nsecandnsec3.html

    Post summary

    The advisory warns of a denial‑of‑service vulnerability in BIND 9.x (CVE‑2026‑13204) and strongly recommends upgrading to a patched version.

    03050529
    1.3K followersView on X
  • Kazuki Omo@omokazuki
    Disclosure

    BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/

    Post summary

    The post enumerates several high and medium severity BIND 9 CVEs and links to a security page for additional information.

    02040332
    372 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:54509 - bind9.16 security update (RHEL8) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54509

    Post summary

    Red Hat Security Advisory RHSA‑2026:54509 releases security fixes for six CVEs affecting bind9 on RHEL8, confirming patch availability.

    11011123
    117 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:54654 - bind security update (RHEL8) - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54654

    Post summary

    Red Hat’s RHSA-2026:54654 alerts users to several CVEs affecting bind on RHEL8 and refers to a security update that addresses them.

    1001058
    117 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:54510 - bind security update (RHEL9) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54510

    Post summary

    Red Hat issues a security update for Bind on RHEL9, addressing several CVEs through the RHSA-2026:54510 errata.

    1001061
    117 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:55437 - bind security update (RHEL10) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:55437

    Post summary

    The advisory announces a RHEL10 security update addressing six CVEs, indicating patch release with no additional exploit or technical details.

    1000043
    117 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:55442 - bind9.18 security update (RHEL9) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:55442

    Post summary

    The Red Hat advisory announces a security update for bind9.18 on RHEL 9, fixing several CVEs with patches, but does not provide PoC, exploit, or active exploitation details.

    0000037
    117 followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos ISC ❗ CVE-2026-13321 ❗ CVE-2026-13204 ❗ CVE-2026-12617 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-isc-2/ https://t.co/F9ZBhRX5OR

    Post summary

    The tweet announces three new CVEs—CVE-2026-13321, CVE-2026-13204, CVE-2026-12617—impacting ISC products and directs readers to external links for further details.

    00000205
    6.7K followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-13204 If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unex… https://www.cve.org/CVERecord?id=CVE-2026-13204 ----- Traducción: CVE-2026-13204 Si … http://infoflow.cloud`

    Post summary

    The post merely links to the CVE record and supplies a brief technical summary, without any PoC, exploit, patch, or evidence of active exploitation.

    0000036
    94 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-13204 If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unex… https://www.cve.org/CVERecord?id=CVE-2026-13204

    Post summary

    The entry outlines a BIND crash scenario involving NSEC/NSEC3 records and an RRSIG mismatch, without mentioning a PoC, exploit, patch, or active exploitation.

    00000797
    57.8K followersView on X

Explore more

Back to dashboard