[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGpELfiZQMfhFUyvcgkfAguwU7aI40IXMiPW-bFbUTrM":3},{"article":4,"iocs":39,"watch_terms":73,"solutions":74,"lesson":163},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"98483035-e602-4508-a78d-04f8fe2a2614","BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS","bind-9-update-fixes-14-flaws-including-an-unauthenticated-crash-over-dns-over-ht-6829fa","The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9, its open-source DNS server software. One of them affects any BIND server that answers DNS-over-HTTPS (DoH). A sender with no credentials can crash the server process, named, with a single request that carries an invalid SIG","The Internet Systems Consortium released BIND 9.20.29 and 9.21.26 to fix 14 security vulnerabilities disclosed on September 16, 2026. One critical flaw allows unauthenticated attackers to crash BIND servers over DNS-over-HTTPS (DoH) by sending a single malformed request with an invalid SIG(0) signature. ISC rates 7 flaws as High severity (CVSS 7.5) involving denial-of-service conditions, while the remaining 7 are Medium severity affecting DNS data integrity and DNSSEC validation.","ISC releases BIND 9.20.29 and 9.21.26 patching 14 flaws including unauthenticated DoH crash","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fbind-9-update-fixes-14-flaws-including.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEgEd6WLqBvkSx9Y2P6HrNL-VApj7Xb05Wlhnw4pPW6-X9NwGiAeAm_Hf4KYj_1hEy6uITGe8kh3xgYeTAha8nR5inx0snMzfWGP2Qd8kRuiOp0h4O49J-33kPpA1cuGhClV2qAvPyhyr2BqSYj9ZIvI6c-wncUNGESpGK-3tivnS-HIrOj9ZdSJALq_8Ts\u002Fs1600\u002Fbind9.jpg","2026-09-17T08:00:29+00:00","2026-09-17T14:00:31.704827+00:00",9,[17,20,23,26],{"name":18,"type":19},"BIND 9","product",{"name":21,"type":22},"Internet Systems Consortium","vendor",{"name":24,"type":25},"DNS-over-HTTPS","technology",{"name":27,"type":25},"DNSSEC","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",[40,44,47,50,53,56,59,62,64,67,70],{"type":41,"value":42,"context":43},"cve","CVE-2026-77692","Unauthenticated DoH crash via invalid SIG(0) signature",{"type":41,"value":45,"context":46},"CVE-2026-76163","TKEY query crash when named.conf lacks global options block",{"type":41,"value":48,"context":49},"CVE-2026-19667","Crash in default resolver configuration via crafted response",{"type":41,"value":51,"context":52},"CVE-2026-19666","Crash in resolver using dns64 with break-dnssec yes",{"type":41,"value":54,"context":55},"CVE-2026-80274","Crash in validating resolver receiving wildcard with NSEC\u002FNSEC3",{"type":41,"value":57,"context":58},"CVE-2026-19662","Crash requiring specific order\u002Ftiming of answers; affects 9.20 only",{"type":41,"value":60,"context":61},"CVE-2026-81563","CPU\u002Fmemory exhaustion via cached SVCB\u002FHTTPS alias records",{"type":41,"value":63,"context":61},"CVE-2026-81736",{"type":41,"value":65,"context":66},"CVE-2026-19941","DNSSEC cache poisoning via signed NSEC from unrelated zone",{"type":41,"value":68,"context":69},"CVE-2026-77119","DNSSEC cache poisoning via signed NSEC3 from sibling zone",{"type":41,"value":71,"context":72},"CVE-2026-19033","TSIG-signed zone transfer vulnerability on secondary server",[21,18],{"controls":75,"vendors":162},[76,105,133],{"slug":77,"name":78,"problem":79,"products":80},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":106,"name":107,"problem":108,"products":109},"patch-management","Automated patch management","Known holes get closed in days, not months.",[110,118,125],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":106,"product_name":122,"url":123,"description":124},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":134,"name":135,"problem":136,"products":137},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[138,146,154],{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":147,"vendor_name":148,"vendor_logo":149,"product_slug":150,"product_name":151,"url":152,"description":153},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":155,"vendor_name":156,"vendor_logo":157,"product_slug":158,"product_name":159,"url":160,"description":161},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",[],{"slug":164,"title":165,"body":166,"framework_refs":167,"framework_notes":178},"bind-9-flaws-allow-unauthenticated-dos-via-dns-over-https","BIND 9 Flaws Allow Unauthenticated DoS via DNS-over-HTTPS","The Internet Systems Consortium (ISC) patched 14 vulnerabilities in BIND 9, including a critical flaw that allows any unauthenticated attacker to crash a DNS server by sending a single malformed DNS-over-HTTPS request — no credentials or prior access required. DNS infrastructure is foundational to nearly all internet-facing services, meaning an exploited crash can cause widespread outages affecting entire networks or organizations. Seven of the flaws carry a High CVSS score of 7.5, indicating significant risk of denial-of-service at scale. This incident highlights how unpatched DNS software becomes an easy, high-impact target, and that even protocol-level features like DoH can introduce new attack surfaces if not carefully hardened and kept up to date.",[168,169,170,171,172,173,174,175,176,177],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 1: Inventory and Control of Enterprise Assets","NIST SP 800-81-2: Secure Domain Name System (DNS) Deployment Guide","NIST SI-2: Flaw Remediation","NIST CM-8: System Component Inventory","NIST RA-5: Vulnerability Monitoring and Scanning","NIST SC-20: Secure Name\u002FAddress Resolution Service (Authoritative Source)","ITIL: Change Enablement — Emergency Change Procedure","ISO\u002FIEC 27001: A.12.6.1 Management of Technical Vulnerabilities",{}]