# Isc BIND 9 vulnerabilities Source: https://junglewise.ai/threats/technologies/bind-9 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/bind-9.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 21 vulnerabilities in Isc BIND 9: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-97313, was published on 21 October 2026. 1 vulnerability in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 1 - All time: 21 (0 critical, 0 exploited in the wild) ## About Isc BIND 9 BIND 9 is a widely used open-source Domain Name System (DNS) software suite. ## Latest Isc BIND 9 vulnerabilities - [CVE-2026-97313: ISC BIND recursive server assert failure denial of service](https://junglewise.ai/threats/cve-2026-97313-a-recursive-bind-server-that-receives-a-query-with-recursion) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2026-13321: ISC BIND DNSSEC validation bypass in NSEC records](https://junglewise.ai/threats/cve-2026-13321-isc-bind-dnssec-validation-bypass-in-nsec-records) (high, CVSS 8.6, published 22 Jul 2026) - [CVE-2026-13204: ISC BIND 9 denial of service via NSEC and NSEC3 assertion failure](https://junglewise.ai/threats/cve-2026-13204-isc-bind-9-denial-of-service-via-nsec-and-nsec3-assertion-failure) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-12617: ISC BIND 9 denial of service via CNAME or DNAME record ordering](https://junglewise.ai/threats/cve-2026-12617-isc-bind-9-denial-of-service-via-cname-or-dname-record-ordering) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-11721: ISC BIND 9 cache poisoning via RRSIG label count discrepancy](https://junglewise.ai/threats/cve-2026-11721-isc-bind-9-cache-poisoning-via-rrsig-label-count-discrepancy) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-11622: ISC BIND 9 resource exhaustion in DNSSEC validating resolver](https://junglewise.ai/threats/cve-2026-11622-isc-bind-9-resource-exhaustion-in-dnssec-validating-resolver) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-11605: ISC BIND 9 resource exhaustion in DNSSEC validation](https://junglewise.ai/threats/cve-2026-11605-isc-bind-9-resource-exhaustion-in-dnssec-validation) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-11331: ISC BIND 9 RPZ policy bypass and denial of service](https://junglewise.ai/threats/cve-2026-11331-isc-bind-9-rpz-policy-bypass-and-denial-of-service) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-10822: ISC BIND assertion failure via malformed PRIVATEDNS record](https://junglewise.ai/threats/cve-2026-10822-isc-bind-assertion-failure-via-malformed-privatedns-record) (medium, CVSS 6.5, published 22 Jul 2026) - [CVE-2026-10723: ISC BIND incorrect NSEC3 record validation](https://junglewise.ai/threats/cve-2026-10723-isc-bind-incorrect-nsec3-record-validation) (medium, CVSS 6.8, published 22 Jul 2026) - [CVE-2026-5950: ISC BIND 9 unbounded resend loop in resolver state machine](https://junglewise.ai/threats/cve-2026-5950-isc-bind-9-unbounded-resend-loop-in-resolver-state-machine) (medium, CVSS 5.3, published 20 May 2026) - [CVE-2026-5947: ISC BIND 9 use-after-free in SIG(0) validation during query flood](https://junglewise.ai/threats/cve-2026-5947-isc-bind-9-use-after-free-in-sig-0-validation-during-query-flood) (high, CVSS 7.5, published 20 May 2026) - [CVE-2026-5946: ISC BIND 9 denial of service in named via non-IN DNS classes](https://junglewise.ai/threats/cve-2026-5946-isc-bind-9-denial-of-service-in-named-via-non-in-dns-classes) (high, CVSS 7.5, published 20 May 2026) - [CVE-2026-3593: ISC BIND 9 use-after-free in DNS-over-HTTPS implementation](https://junglewise.ai/threats/cve-2026-3593-isc-bind-9-use-after-free-in-dns-over-https-implementation) (high, CVSS 7.4, published 20 May 2026) - [CVE-2026-3592: ISC BIND resource exhaustion in DNS resolver](https://junglewise.ai/threats/cve-2026-3592-isc-bind-resource-exhaustion-in-dns-resolver) (medium, CVSS 5.3, published 20 May 2026) - [CVE-2026-3039: ISC BIND 9 memory exhaustion in GSS-API TKEY negotiation](https://junglewise.ai/threats/cve-2026-3039-isc-bind-9-memory-exhaustion-in-gss-api-tkey-negotiation) (high, CVSS 7.5, published 20 May 2026) - [CVE-2026-3591: ISC BIND 9 stack use-after-return in SIG(0) handling](https://junglewise.ai/threats/cve-2026-3591-isc-bind-9-stack-use-after-return-in-sig-0-handling) (medium, CVSS 5.4, published 25 Mar 2026) - [CVE-2026-3119: ISC BIND 9 denial of service via TKEY record in authenticated query](https://junglewise.ai/threats/cve-2026-3119-isc-bind-9-denial-of-service-via-tkey-record-in-authenticated) (medium, CVSS 6.5, published 25 Mar 2026) - [CVE-2026-3104: ISC BIND 9 memory leak in DNSSEC proof-of-non-existence code](https://junglewise.ai/threats/cve-2026-3104-isc-bind-9-memory-leak-in-dnssec-proof-of-non-existence-code) (high, CVSS 7.5, published 25 Mar 2026) - [CVE-2026-1519: ISC BIND 9 denial of service via excessive NSEC3 iterations](https://junglewise.ai/threats/cve-2026-1519-isc-bind-9-denial-of-service-via-excessive-nsec3-iterations) (high, CVSS 7.5, published 25 Mar 2026) - [CVE-2025-13878: ISC BIND 9 denial of service via malformed BRID or HHIT records](https://junglewise.ai/threats/cve-2025-13878-isc-bind-9-denial-of-service-via-malformed-brid-or-hhit-records) (high, CVSS 7.5, published 21 Jan 2026) ## Most severe Isc BIND 9 vulnerabilities - [CVE-2026-13321: ISC BIND DNSSEC validation bypass in NSEC records](https://junglewise.ai/threats/cve-2026-13321-isc-bind-dnssec-validation-bypass-in-nsec-records) (high, CVSS 8.6, published 22 Jul 2026) - [CVE-2025-13878: ISC BIND 9 denial of service via malformed BRID or HHIT records](https://junglewise.ai/threats/cve-2025-13878-isc-bind-9-denial-of-service-via-malformed-brid-or-hhit-records) (high, CVSS 7.5, published 21 Jan 2026) - [CVE-2026-3104: ISC BIND 9 memory leak in DNSSEC proof-of-non-existence code](https://junglewise.ai/threats/cve-2026-3104-isc-bind-9-memory-leak-in-dnssec-proof-of-non-existence-code) (high, CVSS 7.5, published 25 Mar 2026) - [CVE-2026-1519: ISC BIND 9 denial of service via excessive NSEC3 iterations](https://junglewise.ai/threats/cve-2026-1519-isc-bind-9-denial-of-service-via-excessive-nsec3-iterations) (high, CVSS 7.5, published 25 Mar 2026) - [CVE-2026-97313: ISC BIND recursive server assert failure denial of service](https://junglewise.ai/threats/cve-2026-97313-a-recursive-bind-server-that-receives-a-query-with-recursion) (high, CVSS 7.5, published 21 Oct 2026) - [CVE-2026-13204: ISC BIND 9 denial of service via NSEC and NSEC3 assertion failure](https://junglewise.ai/threats/cve-2026-13204-isc-bind-9-denial-of-service-via-nsec-and-nsec3-assertion-failure) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-12617: ISC BIND 9 denial of service via CNAME or DNAME record ordering](https://junglewise.ai/threats/cve-2026-12617-isc-bind-9-denial-of-service-via-cname-or-dname-record-ordering) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-11721: ISC BIND 9 cache poisoning via RRSIG label count discrepancy](https://junglewise.ai/threats/cve-2026-11721-isc-bind-9-cache-poisoning-via-rrsig-label-count-discrepancy) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-11622: ISC BIND 9 resource exhaustion in DNSSEC validating resolver](https://junglewise.ai/threats/cve-2026-11622-isc-bind-9-resource-exhaustion-in-dnssec-validating-resolver) (high, CVSS 7.5, published 22 Jul 2026) - [CVE-2026-11605: ISC BIND 9 resource exhaustion in DNSSEC validation](https://junglewise.ai/threats/cve-2026-11605-isc-bind-9-resource-exhaustion-in-dnssec-validation) (high, CVSS 7.5, published 22 Jul 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Isc technologies - [Isc BIND](https://junglewise.ai/threats/technologies/bind): 23 vulnerabilities - [Isc BIND 9 Supported Preview Edition](https://junglewise.ai/threats/technologies/bind-9-supported-preview-edition): 5 vulnerabilities - [Isc InterNetNews](https://junglewise.ai/threats/technologies/internetnews): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Isc BIND 9 vulnerabilities", https://junglewise.ai/threats/technologies/bind-9, 9 November 2026.