日本レジストリサービス（JPRS）@JPRS_official
（緊急）BIND 9.xの脆弱性（DNSサービスの停止・リモートコード実行）について（CVE-2026-94300） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-10-22-bind9-cve-2026-94300.html
68022151.1K536281.5K
1.6K followersView on X
CVE-2026-94300
LOWCVSS 8.1 · HIGHImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially achieve remote code execution. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-362CWE-415
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Deep dive
Full discourse20 posts
Lukasz Jachowicz@ljachowiczPoważny błąd bezpieczeństwa w serwerze dns BIND 9. Może po prostu wyłączmy internet na kilka dni? https://kb.isc.org/docs/cve-2026-94300
2301911.3K1.3K followersView on X
Frank@jedisct1The week is not over yet. So what about an RCE in BIND 9?https://kb.isc.org/docs/cve-2026-94300
0501031.0K18.5K followersView on X
Blink Labs@blinklabs_ioDNS (BIND) said "hold my beer" 😅 https://kb.isc.org/docs/cve-2026-94300
000402303.9K followersView on X
stypr@brokenpacifist@ZeddYu_Lu https://securityonline.info/cve-watchtower/cve-2026-94300/
100123815.5K followersView on X
tetsugan sakamoto@CryptoTetsuganBINDは世界で最も広く使われているDNSサーバーソフトウェアです。今回の脆弱性（CVE-2026-94300）は、そのBINDのnamedプロセスに対するものです
010114193.7K followersView on X
Saku Vaan@sakucee@UK_Daniel_Card Did you hear about the BIND 9 RCE? https://kb.isc.org/docs/cve-2026-94300
100102145 followersView on X
sulex ⛧@sulex____@m4dbi7 @WebMarkeThink Manca Bind alla lista: https://kb.isc.org/docs/cve-2026-94300
1001028167 followersView on X
Moon@MoonL88537translation: that’s a serious bug in BIND, software used to run DNS servers. specially replayed, authenticated DNS messages can corrupt its memory—crashing it, or potentially letting an attacker run code. ISC says it knows of no active exploits. https://kb.isc.org/docs/cve-2026-94300
000201173.1K followersView on X
沢池新@FIRE SKILLS@sawaikeshinBINDもこのタイミングで。ぱっと見PHP2Shellほどではなさそうですが、インフラ管理している方は対処しておかないといけなさそうですね。 https://jprs.jp/tech/security/2026-10-22-bind9-cve-2026-94300.html
100002285 followersView on X
pdp@pdpHigh-severity issue in Bind 9 https://kb.isc.org/docs/cve-2026-94300
000101356.1K followersView on X
alice 🔜 🌁 sf (10/25-11/4) → 🇯🇵 tokyo@aliceisplayingoh ok i guess bind9 is next. sure https://kb.isc.org/docs/cve-2026-94300
000101867.5K followersView on X
shimaru@marushi___new DNS RCE just dropped 🤭 https://kb.isc.org/docs/cve-2026-94300
010008516 followersView on X
Abhay अभय@abyzzBIND 9 DNS: replaying GSS-TSIG signed UDP messages can corrupt memory in named. Worst case: remote code execution. CVSS 8.1, no workaround. No known exploits yet. Upgrade to 9.20.30 / 9.21.27. On 9.18? Check with ISC. https://kb.isc.org/docs/cve-2026-94300
0000036174 followersView on X
AlxCzl - F4JQP 📡@alx_czlhttps://kb.isc.org/docs/cve-2026-94300 Baalllright
00000980 followersView on X
PiX@pixincreatecan we PLEASE turn the internet off and on again. this is getting ridiculous. https://kb.isc.org/docs/cve-2026-94300
0000012376 followersView on X- sulex ⛧@sulex____
@rivluc @checovenier Gitlab e Bind(CVE-2026-94300) pure.
0000037167 followersView on X - sulex ⛧@sulex____
@nuke86 Nessun dorma! https://www.cve.org/CVERecord?id=CVE-2026-94300
0000025167 followersView on X 
Bitcoin Cat ⚡️ 13%@realmuster@t1o6n3y DNS? https://kb.isc.org/docs/cve-2026-94300
0000091226.3K followersView on X
Discordine@twitch配信|WAFオンINF縛り@Discordine86461ばかばかばか https://kb.isc.org/docs/cve-2026-94300
000003793 followersView on X