CVE-2026-76163General

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

If BIND is loaded with a "`named.conf`" file that contains no global "`options`" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • General: 2 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-09-17)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-16: 1Mentions · 2026-09-17: 2Patch / Workaround · 2026-09-17: 109-1609-17
Signal classification2 categories
General
266.7%
Patch
133.3%
Referenced assets15 URLs
Classification over time
DateTotalLabels
2026-09-161
General1
2026-09-172
General1Patch1
Full discourse3 posts
  • Yasuhiro Morishita@OrangeMorishita
    General

    【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736

    Post summary

    The text is a personal memo listing 14 CVEs with links to ISC knowledge base documents, but it lacks any specific details about vulnerabilities, exploits, patches, or exploitation status.

    032821.6K
    4.6K followersView on X
  • 日本レジストリサービス(JPRS)@JPRS_official
    Patch

    (緊急)BIND 9.xの脆弱性(DNSサービスの停止)について(CVE-2026-76163) - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-tkey.html

    Post summary

    The announcement discloses CVE‑2026‑76163 affecting BIND 9.x that can cause DNS service outages and strongly advises upgrading to mitigate the issue.

    01030391
    1.3K followersView on X
  • Yu F@fj_twt
    General

    🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736

    Post summary

    The text consists solely of a list of 14 CVE identifiers with a disgust emoji and no additional context, technical details, or actionable information about any of the vulnerabilities.

    00010224
    1.6K followersView on X

Explore more