VulnSocial

CVE-2026-19033General

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually possess a valid TSIG signature to send unauthorized zone contents to a secondary server. Although no TSIG signature ever arrives, `named` does not rollback to the pre-transfer state. To exploit the vulnerability, the transfer must be a multi-message TCP IXFR, as described by RFC 8945. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-349

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 6 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 3 mentions (2026-09-17); latest day: 1
  • 6 total mentions across 3 days

Deep dive

Activity timeline6 mentions / 3d
01223Mentions · 2026-09-16: 2Mentions · 2026-09-17: 3Mentions · 2026-09-28: 1Patch / Workaround · 2026-09-16: 1Patch / Workaround · 2026-09-17: 1Technical Details · 2026-09-17: 1Technical Details · 2026-09-28: 109-1609-1709-28
Signal classification3 categories
General
233.3%
Patch
233.3%
Disclosure
233.3%
Referenced assets17 URLs
Classification over time
DateTotalLabels
2026-09-162
General1Patch1
2026-09-173
Disclosure1General1Patch1
2026-09-281
Disclosure1
Full discourse6 posts
  • Yasuhiro Morishita@OrangeMorishita
    Disclosure

    【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736

    Post summary

    A personal memo listing 14 ISC KB links for CVEs this month (7 High severity), serving as a disclosure/bookmark of vulnerability announcements with no PoC, exploit, patch, or technical details in the text itself.

    032821.6K
    4.6K followersView on X
  • 日本レジストリサービス（JPRS）@JPRS_official
    Patch

    BIND 9.xの脆弱性（不正なゾーンデータの追加）について（CVE-2026-19033） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-tsig.html

    Post summary

    JPRS announces a BIND 9.x vulnerability (CVE‑2026‑19033) that permits unauthorized zone data insertion and urges immediate software upgrades to mitigate the risk.

    01040381
    1.3K followersView on X
  • 日本レジストリサービス（JPRS）@JPRS_official
    Disclosure

    【メールマガジン（FROM JPRS）】最新号を掲載しました。 通常号 vol.1263FROM JPRS [vol.1263 -2026/09/28-]「BIND 9.xの脆弱性（不正なゾーンデータの追加）について（CVE-2026-19033）、他14件」など https://jprs.jp/mail/backnumber/2026/260928.html

    Post summary

    The JPRS mailing magazine announces CVE-2026-19033 affecting BIND 9.x, describing it as an unauthorized zone data addition vulnerability, along with 14 other items, without mentioning PoC, exploit, active exploitation, or patches.

    00030301
    1.3K followersView on X
  • ε_μζδ@e_MZD
    General

    いっぱいあるよ https://kb.isc.org/docs/cve-2026-19033

    Post summary

    The tweet briefly references CVE-2026-19033 with a link to an advisory but lacks clear indicators of PoC, exploit, active exploitation, patch, or technical details, leading to a low-confidence 'General' classification.

    0001072
    126 followersView on X
  • Kazuki Omo@omokazuki
    Patch

    BIND 9の脆弱性(High: CVE-2026-19666,19667,76163, 77692,80274,81563, 81736, Medium: CVE-2026-19033, 19662, 19668, 19941,75029, 77119, 78301)と修正バージョン(9.20.29, 9.21.26) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260917/

    Post summary

    The tweet discloses BIND 9 vulnerabilities and lists fixed versions 9.20.29 and 9.21.26, indicating a patch is available.

    00010112
    372 followersView on X
  • Yu F@fj_twt
    General

    🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736

    Post summary

    The text is simply a list of multiple CVE identifiers with no additional context, proof‑of‑concept code, exploit tools, reports of active exploitation, patches, or technical details.

    00010224
    1.6K followersView on X

Explore more

Back to dashboard