CVE-2026-19662Patch

LOWCVSS 5.9 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, and those answers arrive in a particular order with particular timing, the `named` resolver will encounter a use-after-free bug, and abort. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 7 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 5 signals
  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Peaked at 3 mentions on most recent observed day (2026-10-26)
  • 7 total mentions across 4 days

Deep dive

Activity timeline7 mentions / 4d
01223Mentions · 2026-09-16: 1Mentions · 2026-09-17: 2Mentions · 2026-09-22: 1Mentions · 2026-10-26: 3Patch / Workaround · 2026-09-17: 1Patch / Workaround · 2026-09-22: 1Patch / Workaround · 2026-10-26: 3Technical Details · 2026-09-17: 1Technical Details · 2026-09-22: 109-1609-1709-2210-26
Signal classification2 categories
Patch
571.4%
General
228.6%
Referenced assets19 URLs
Classification over time
DateTotalLabels
2026-09-161
General1
2026-09-172
General1Patch1
2026-09-221
Patch1
2026-10-263
Patch3
Full discourse7 posts
  • 日本レジストリサービス(JPRS)@JPRS_official
    Patch

    BIND 9.xの脆弱性(DNSサービスの停止)について(CVE-2026-19662) - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-qpcache.html

    Post summary

    The post announces a BIND 9.x denial-of-service vulnerability (CVE-2026-19662) and strongly urges users to upgrade to a fixed version.

    01012282.9K
    1.3K followersView on X
  • Yasuhiro Morishita@OrangeMorishita
    General

    【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736

    Post summary

    A personal memo listing 14 CVEs (7 High severity) for the month with links to ISC knowledge base pages; no PoC, exploit, patch, or technical details are provided in the text itself.

    032821.6K
    4.6K followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:89746 - Moderate: bind9.18 security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:89746 Security Fix(es): - CVE-2026-19662

    Post summary

    The text is a Red Hat Security Advisory announcing a security update for bind9.18 on RHEL9 that addresses CVE-2026-19662, indicating an available vendor patch without describing exploit code or active exploitation.

    1000036
    118 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:89745 - Moderate: bind security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:89745 Security Fix(es): - CVE-2026-19662

    Post summary

    Red Hat has released a moderate severity security update (RHSA-2026:89745) for the bind package on RHEL 9 to address CVE-2026-19662.

    1000021
    118 followersView on X
  • Yu F@fj_twt
    General

    🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736

    Post summary

    The text merely lists multiple CVE identifiers without actionable or technical context. It does not provide evidence of PoC, exploit availability, active exploitation, remediation, or vulnerability details.

    00010224
    1.6K followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:90328 - Moderate: bind security update [RHEL10] https://access.redhat.com/errata/RHSA-2026:90328 Security Fix(es): - CVE-2026-19662

    Post summary

    The text is a Red Hat Security Advisory announcing a security update for bind to address CVE-2026-19662, with the primary focus on the availability of a patch. No technical details or exploitation information are provided.

    0000033
    118 followersView on X
  • zoomeyebot@zoomeyebot
    Patch

    🚨 ISC BIND Patches 14 Flaws That Can Crash, Spoof and Poison DNS Critical Vulnerability Alert! ISC BIND 9.11.0-9.18.50, 9.20.0-9.20.27, 9.21.0-9.21.25 is affected by CVE-2026-19662. 🔍 Identify Targets via ZoomEye: Search Dork: app="ISC BIND" Exposure: 19.4m instances identified globally. ZoomEye Search Link: 👉 https://www.zoomeye.ai/searchResult?q=YXBwPSJJU0MgQklORCI%3D #Infosec #CyberSecurity #ZoomEye

    Post summary

    The text announces ISC BIND patches addressing 14 DNS-related flaws (CVE-2026-19662), lists affected versions, and includes a ZoomEye search link for target identification, but lacks detailed technical specs, PoC, or exploit references.

    0000045
    24 followersView on X

Explore more