CVE-2026-19666Patch

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
13 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 9 signals
Technical details provided in 5 signals
Disclosure: 2 classified signals
General: 2 classified signals
Peaked 3d ago at 6 mentions (2026-09-16); latest day: 2
13 total mentions across 4 days

Deep dive

Activity timeline13 mentions / 4d

Signal classification3 categories

Patch

969.2%

Disclosure

215.4%

General

215.4%

Referenced assets21 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-16	6	Disclosure2General1Patch3
2026-09-17	2	General1Patch1
2026-10-06	3	Patch3
2026-10-08	2	Patch2

Full discourse13 posts

新月@fubukiyokiyoki46d
Disclosure
インターネットを破壊しました BIND 9に2件の脆弱性を報告し、CVE-2026-19666とCVE-2026-19667が採番されましたどちらもリゾルバのDoSで CVE-2026-19666はdns64有効時 CVE-2026-19667はデフォルトで影響します CVSSはどちらも7.5(High)です https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667
Post summary
The text announces two newly assigned vulnerabilities in BIND 9 (CVE-2026-19666 and CVE-2026-19667), both being high-severity (CVSS 7.5) resolver Denial of Service (DoS) issues, and provides links to the vendor's knowledge base.
24122164817.0K
3.3K followersView on X
Yasuhiro Morishita@OrangeMorishita46d
General
【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736
Post summary
The note is a personal memo listing 14 CVE identifiers with links to ISC knowledge base entries, noting that 7 are rated High. It provides no exploit, PoC, patch, or active exploitation details.
032821.6K
4.6K followersView on X
Rıdvan Yağlı@ridvanyagli46d
Patch
🔴 BIND 9'da iki yeni DoS açığı keşfedildi: CVE-2026-19666 ve CVE-2026-19667. CVE-2026-19666, DNS64 etkin resolver'ları; CVE-2026-19667 ise varsayılan yapılandırmadaki resolver'ları etkileyerek uzaktan named sürecinin çökmesine neden olabiliyor. Public recursive DNS sunucuları başta olmak üzere BIND 9 sistemlerinin güncel desteklenen sürüme yükseltilmesi gerekiyor.
Post summary
Two new BIND 9 DoS vulnerabilities (CVE-2026-19666 and CVE-2026-19667) that affect DNS64-enabled and default resolvers, respectively, have been disclosed, and organizations are urged to upgrade to the latest supported BIND 9 version.
02052776
2.5K followersView on X
日本レジストリサービス（JPRS）@JPRS_official46d
Patch
（緊急）BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2026-19666） - DNS64を有効にしている場合のみ対象、バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-dns64.html
Post summary
The text is a security advisory about CVE-2026-19666 affecting BIND 9.x when DNS64 is enabled, causing DNS service disruption. It strongly recommends upgrading the software as a remediation measure. The advisory discloses specific technical details but does not mention a PoC, active exploitation, or named exploit tools.
01040376
1.3K followersView on X
ねこさん⚡(ΦωΦ)@catnap70746d
Patch
CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path https://kb.isc.org/docs/cve-2026-19666 "BIND Supported Preview Edition 9.11.3-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.27-S1 Severity: High Exploitable: Remotely"
Post summary
The tweet discloses a use‑after‑free vulnerability (CVE‑2026‑19666) in BIND’s DNS64 filter64 path, providing technical details and severity, and indicates that version upgrades (9.11.3‑S1→9.18.50‑S1 and 9.20.9‑S1→9.20.27‑S1) are the recommended remediation.
11010224
3.5K followersView on X
まこぴ@makopicut24d
Patch
RHSA-2026:79113 - Important: bind9.16 security, bug fix, and enhancement update [RHEL8] https://access.redhat.com/errata/RHSA-2026:79113 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666 Bug Fix(es) and Enhancement(s): - bind 9.16 crash with SIGSEGV (JIRA:RHEL-273294)
Post summary
The text announces a Red Hat bind 9.16 security update that fixes three listed CVEs. It provides no PoC, exploit details, or evidence of active exploitation.
1000043
118 followersView on X
まこぴ@makopicut26d
Patch
RHSA-2026:75767 - Important: bind security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:75767 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666
Post summary
The text is a Red Hat Security Advisory announcing a bind security update for RHEL9 addressing three CVEs, with no mention of PoCs, exploits, or active exploitation.
1000041
118 followersView on X
まこぴ@makopicut26d
Patch
RHSA-2026:75578 - Important: bind9.18 security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:75578 Security Fix(es): - CVE-2026-81736 - CVE-2026-19667 - CVE-2026-81563 - CVE-2026-80274 - CVE-2026-19666
Post summary
The post is a Red Hat Security Advisory (RHSA-2026:75578) announcing security fixes for multiple CVEs affecting bind9.18 on RHEL 9, confirming a patch is available with no indication of active exploitation, PoC code, or false claims.
1000053
118 followersView on X
まこぴ@makopicut26d
Patch
RHSA-2026:75577 - Important: bind security update [RHEL10] https://access.redhat.com/errata/RHSA-2026:75577 Security Fix(es): - CVE-2026-81736 - CVE-2026-19667 - CVE-2026-81563 - CVE-2026-80274 - CVE-2026-19666
Post summary
The advisory announces a security update for BIND on RHEL10 that patches several CVEs, urging users to apply the update.
1000087
118 followersView on X
Kazuki Omo@omokazuki46d
Patch
BIND 9の脆弱性(High: CVE-2026-19666,19667,76163, 77692,80274,81563, 81736, Medium: CVE-2026-19033, 19662, 19668, 19941,75029, 77119, 78301)と修正バージョン(9.20.29, 9.21.26) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260917/
Post summary
The text announces multiple BIND 9 vulnerabilities (with CVE IDs and severity ratings) and provides fixed versions (9.20.29, 9.21.26) as remediation, functioning primarily as a patched advisory notice.
00010112
372 followersView on X
灯里@akari_iku46d
General
インターネットぶっ壊れる…ひん… https://kb.isc.org/docs/cve-2026-19666
Post summary
The post expresses concern that the internet may break and links to an ISC CVE knowledge-base article, but provides no explicit PoC, exploit tooling, active exploitation, patch, technical details, or debunking claim.
00010280
161 followersView on X
Yu F@fj_twt46d
Disclosure
🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736
Post summary
The input is a plain list of CVE identifiers without any PoC, exploit code, patch, or evidence of active exploitation, so the analysis classifies it as a Disclosure with no other indicators.
00010224
1.6K followersView on X
まこぴ@makopicut24d
Patch
RHSA-2026:79162 - Important: bind security update [RHEL8] https://access.redhat.com/errata/RHSA-2026:79162 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666
Post summary
The text announces a Red Hat BIND security update for RHEL 8 covering three CVEs. It provides no PoC, exploit, active-exploitation report, or technical vulnerability details.
0000038
118 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-19666

Yasuhiro Morishita[verified]@OrangeMorishitaGeneral

The note is a personal memo listing 14 CVE identifiers with links to ISC knowledge base entries, noting that 7 are rated High. It provides no exploit, PoC, patch, or active exploitation details.

Rıdvan Yağlı[verified]@ridvanyagliPatch

Two new BIND 9 DoS vulnerabilities (CVE-2026-19666 and CVE-2026-19667) that affect DNS64-enabled and default resolvers, respectively, have been disclosed, and organizations are urged to upgrade to the latest supported BIND 9 version.

灯里[verified]@akari_ikuGeneral

The post expresses concern that the internet may break and links to an ISC CVE knowledge-base article, but provides no explicit PoC, exploit tooling, active exploitation, patch, technical details, or debunking claim.

Yu F[verified]@fj_twtDisclosure

The input is a plain list of CVE identifiers without any PoC, exploit code, patch, or evidence of active exploitation, so the analysis classifies it as a Disclosure with no other indicators.

新月@fubukiyokiyokiDisclosure

The text announces two newly assigned vulnerabilities in BIND 9 (CVE-2026-19666 and CVE-2026-19667), both being high-severity (CVSS 7.5) resolver Denial of Service (DoS) issues, and provides links to the vendor's knowledge base.

日本レジストリサービス（JPRS）@JPRS_officialPatch

The text is a security advisory about CVE-2026-19666 affecting BIND 9.x when DNS64 is enabled, causing DNS service disruption. It strongly recommends upgrading the software as a remediation measure. The advisory discloses specific technical details but does not mention a PoC, active exploitation, or named exploit tools.

ねこさん⚡(ΦωΦ)@catnap707Patch

The tweet discloses a use‑after‑free vulnerability (CVE‑2026‑19666) in BIND’s DNS64 filter64 path, providing technical details and severity, and indicates that version upgrades (9.11.3‑S1→9.18.50‑S1 and 9.20.9‑S1→9.20.27‑S1) are the recommended remediation.

まこぴ@makopicutPatch

The text announces a Red Hat bind 9.16 security update that fixes three listed CVEs. It provides no PoC, exploit details, or evidence of active exploitation.