CVE-2026-96888

LOWCVSS 7.5 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-476CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse3 posts
  • 日本レジストリサービス(JPRS)@JPRS_official

    (緊急)BIND 9.xの脆弱性(DNSサービスの停止)について(CVE-2026-96888) - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-10-22-bind9-cve-2026-96888.html

    01312414.0K
    1.6K followersView on X
  • Kazuki Omo@omokazuki

    BIND 9の脆弱性(High: CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)と修正版(9.20.30, 9.21.27)リリース #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20261022/

    00000398
    376 followersView on X
  • Hiroaki Asai@integra

    CVE-2026-96888 Severity:High ですかぁ。

    0000044
    1.3K followersView on X

Explore more