Skip to content
High-Severity BIND 9 Vulnerability CVE-2026-94300 Allows Remote Code Execution

High-Severity BIND 9 Vulnerability CVE-2026-94300 Allows Remote Code Execution

First seen 23 Oct 2026, 02:12 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 23, 2026 at 03:42 UTC
  • •CVE-2026-94300 allows remote code execution via GSS-TSIG message replay.
  • •All BIND versions from 9.11.0 to 9.21.26 are affected; immediate upgrades are recommended.
  • •ISC has released patches and confirmed no known active exploitation at this time.

The Internet Systems Consortium (ISC) released patches for a BIND 9 vulnerability, CVE-2026-94300, on October 21, 2026. This flaw affects all BIND versions from 9.11.0 to 9.21.26 and allows an attacker to execute remote code by replaying GSS-TSIG signed UDP messages. The vulnerability has a CVSS score of 8.1 and is classified as a race condition and double free. Although ISC is not aware of any active exploitation, the Canadian Centre for Cyber Security and Japan Registry Services have issued urgent advisories recommending immediate upgrades. The flaw was discovered during internal testing, with additional credit given to researcher Dave Aitel for reporting it. No workarounds are available, and affected users are urged to upgrade to patched versions 9.20.30 or 9.21.27.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-14
Early notification sent to support customers
ISC informed support customers about the vulnerability ahead of public disclosure.
Kb.Isc
2026-10-21
Public disclosure of CVE-2026-94300
ISC published an advisory detailing the high-severity vulnerability affecting multiple BIND versions.
Cyberkendra
2026-10-21
Patches released for affected BIND versions
ISC released BIND versions 9.20.30 and 9.21.27 to address the vulnerabilities, including CVE-2026-94300.
Linux Compatible
2026-10-21
CVE-2026-96888 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-21
CVE-2026-97313 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-21
CVE-2026-19630 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-22
Urgent advisories issued by JPRS and Cyber Security Centre
Both organizations recommended immediate upgrades due to the potential for service disruption and remote code execution.
Cyberkendra

More articles in this cluster (6)

Following this threat?

Track Canadian Centre For Cyber Security and CVE-2026-19630 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 3

Common questions

Which versions of BIND are affected?
BIND versions from 9.11.0 to 9.21.26 are affected, including specific preview editions.
Is there any active exploitation of this vulnerability?
No, ISC has stated that they are not aware of any active exploitation of CVE-2026-94300.
What should I do to protect my systems?
Upgrade to BIND versions 9.20.30 or 9.21.27 immediately to mitigate the vulnerability.