VulnSocial

CVE-2026-19668General

LOWCVSS 5.3 · MEDIUM

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A BIND recursive resolver may experience excessive resource consumption if it encounters large numbers of a particular kind of invalid DNSSEC record. Default limits on "max-records-per-type" and "max-types-per-name" help mitigate the exposure. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-407

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-09-17)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-16: 1Mentions · 2026-09-17: 2PoC Mentioned / Linked · 2026-09-17: 1Patch / Workaround · 2026-09-17: 1Technical Details · 2026-09-17: 109-1609-17
Signal classification2 categories
General
266.7%
Patch
133.3%
Referenced assets15 URLs
Classification over time
DateTotalLabels
2026-09-161
General1
2026-09-172
General1Patch1
Full discourse3 posts
  • Yasuhiro Morishita@OrangeMorishita
    General

    【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736

    Post summary

    The text is a personal memo listing 14 CVE identifiers with links to ISC advisories, noting seven are rated High severity, without providing technical details, exploitation status, PoCs, or patch information.

    032821.6K
    4.6K followersView on X
  • 日本レジストリサービス（JPRS）@JPRS_official
    Patch

    BIND 9.xの脆弱性（過剰なCPU負荷の誘発）について（CVE-2026-19668） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-invaliddnssec.html

    Post summary

    The text announces a BIND 9.x vulnerability (CVE-2026-19668) causing excessive CPU load and strongly recommends upgrading, linking to a JPRS advisory for full details.

    01040431
    1.3K followersView on X
  • Yu F@fj_twt
    General

    🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736

    Post summary

    The text is a simple list of CVE identifiers with no additional context, details, or references to exploits, patches, or active exploitation. It serves as a general mention of multiple vulnerabilities without specific indicators.

    00010224
    1.6K followersView on X

Explore more

Back to dashboard