Skip to content
ThreatCluster

Critical BIND 9 DNS Vulnerability Exploited with Public Code Release

First seen 10 Nov 2025, 11:52 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A public exploit for CVE-2025-40778, a critical vulnerability in BIND 9, has been released, enabling DNS cache poisoning and traffic redirection. This flaw affects the widely used Domain Name System software, posing risks to global internet infrastructure. Cybersecurity professionals are urged to take immediate action to mitigate the risks associated with this exploit.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 221d ago How this analysis works

More articles in this cluster (1)

Following this threat?

Track CVE-2021-36260 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed