VulnSocial

CVE-2026-80274Patch

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC3 proof, followed by an unsigned NSEC at the same owner name, it will trigger an unexpected program exit. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 9 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 7 signals
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 1d ago at 3 mentions (2026-10-06); latest day: 2
  • 9 total mentions across 5 days

Deep dive

Activity timeline9 mentions / 5d
01223Mentions · 2026-09-16: 1Mentions · 2026-09-17: 2Mentions · 2026-09-30: 1Mentions · 2026-10-06: 3Mentions · 2026-10-08: 2Patch / Workaround · 2026-09-17: 1Patch / Workaround · 2026-09-30: 1Patch / Workaround · 2026-10-06: 3Patch / Workaround · 2026-10-08: 2Technical Details · 2026-09-30: 109-1609-1709-3010-0610-08
Signal classification2 categories
Patch
777.8%
General
222.2%
Referenced assets20 URLs
By indicator
Classification over time
DateTotalLabels
2026-09-161
General1
2026-09-172
General1Patch1
2026-09-301
Patch1
2026-10-063
Patch3
2026-10-082
Patch2
Full discourse9 posts
  • Yasuhiro Morishita@OrangeMorishita
    General

    【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736

    Post summary

    Personal memo listing 14 CVEs (7 High) with links to ISC knowledge-base pages; no PoC, exploit, patch, or technical details provided in the text itself.

    032821.6K
    4.6K followersView on X
  • 日本レジストリサービス（JPRS）@JPRS_official
    Patch

    （緊急）BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2026-80274） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-unsignednsec.html

    Post summary

    The text is an emergency alert regarding CVE-2026-80274 in BIND 9.x, focusing on recommending a version upgrade to address the vulnerability causing DNS service stoppage.

    01030513
    1.3K followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:79113 - Important: bind9.16 security, bug fix, and enhancement update [RHEL8] https://access.redhat.com/errata/RHSA-2026:79113 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666 Bug Fix(es) and Enhancement(s): - bind 9.16 crash with SIGSEGV (JIRA:RHEL-273294)

    Post summary

    The text announces a Red Hat bind9.16 security update for RHEL 8 and lists three CVEs. It provides no PoC, exploit details, or report of active exploitation.

    1000043
    118 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:75767 - Important: bind security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:75767 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    The Red Hat Security Advisory RHSA-2026:75767 announces important security updates for BIND on RHEL9, addressing CVEs-2026-19667, -2026-80274, and -2026-19666. It serves as a patch advisory, directing users to apply the provided fixes.

    1000041
    118 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:75578 - Important: bind9.18 security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:75578 Security Fix(es): - CVE-2026-81736 - CVE-2026-19667 - CVE-2026-81563 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    Red Hat issued a security advisory (RHSA‑2026:75578) providing a security update for bind9.18 on RHEL9 that addresses multiple CVEs.

    1000053
    118 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:75577 - Important: bind security update [RHEL10] https://access.redhat.com/errata/RHSA-2026:75577 Security Fix(es): - CVE-2026-81736 - CVE-2026-19667 - CVE-2026-81563 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    The text is a Red Hat Security Advisory announcing an important security update (patch) for the bind package on RHEL10, listing several CVEs addressed by the update without providing exploit details or PoCs.

    1000087
    118 followersView on X
  • Yu F@fj_twt
    General

    🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736

    Post summary

    The text lists multiple CVE identifiers without any accompanying technical details, proof-of-concept, exploit code, patch information, or claims of active exploitation.

    00010224
    1.6K followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:79162 - Important: bind security update [RHEL8] https://access.redhat.com/errata/RHSA-2026:79162 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    The text announces a Red Hat bind security update for RHEL 8 covering three CVEs. It provides no PoC, exploitation details, or report of active exploitation.

    0000038
    118 followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-80274 (CVSS 7.5) - BIND DNS resolver crash via malformed DNSSEC response. Affects BIND 9.11.0-9.18.50, 9.20.0-9.20.27, 9.21.0-9.21.25. Patch immediately. #CVE #Vulnerability #PatchNow #DFIR https://t.co/NHaZgUARgu

    Post summary

    The tweet announces CVE-2026-80274, a BIND DNS resolver crash (CVSS 7.5) via malformed DNSSEC responses affecting multiple version ranges, and explicitly urges immediate patching.

    0000025
    143 followersView on X

Explore more

Back to dashboard