VulnSocial

CVE-2026-78301General

LOWCVSS 5.8 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server (e.g., via zone transfer), queries for names inside the configured zone then lose authoritative status and return an out-of-zone delegation. On a server that also provides recursion BIND can follow this locally sourced cut and cache attacker-supplied data, affecting names outside the configured zone. This situation persists as long as the malformed zone remains in the zone database. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-349

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-09-17)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-16: 1Mentions · 2026-09-17: 2Patch / Workaround · 2026-09-17: 1Technical Details · 2026-09-17: 109-1609-17
Signal classification2 categories
General
266.7%
Patch
133.3%
Referenced assets15 URLs
Classification over time
DateTotalLabels
2026-09-161
General1
2026-09-172
General1Patch1
Full discourse3 posts
  • Yasuhiro Morishita@OrangeMorishita
    General

    【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736

    Post summary

    The text is a personal memo listing 14 CVE IDs with severity counts (7 High) and links to ISC knowledge base pages. No PoC, exploit, patch, or technical details are provided; it serves as a tracking/reference note rather than a disclosure or actionable alert.

    032821.6K
    4.6K followersView on X
  • 日本レジストリサービス（JPRS）@JPRS_official
    Patch

    BIND 9.xの脆弱性（DNSキャッシュポイズニングの危険性、名前解決の妨害）について（CVE-2026-78301） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-zonecut.html

    Post summary

    The text discloses a BIND 9.x DNS vulnerability (CVE-2026-78301) with technical details on cache poisoning risks and explicitly recommends a version upgrade as remediation.

    01031409
    1.3K followersView on X
  • Yu F@fj_twt
    General

    🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736

    Post summary

    The text only enumerates multiple CVE IDs with no further information. Consequently, none of the detailed security indicators (PoC, exploit, active exploitation, patch, technical details, or false‑positive claims) are present.

    00010224
    1.6K followersView on X

Explore more

Back to dashboard