ISC BIND security advisory (AV26-1072)

Reported by Canadian Centre for Cyber Security

Summary by Cyber Security News21 Oct 2026, 20:48 CET

About this summary. This is a short excerpt from the description that Canadian Centre for Cyber Security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://cyber.gc.ca/en/alerts-advisories/isc-bind-security-advisory-av26-1072

Serial number: AV26-1072 Date: October 21, 2026 As of October 21, 2026, ISC is affected by a vulnerability in the following products: BIND 9 Versions 9.11.0 to 9.18.50 Versions 9.11.0 to 9.18.50 ◦ Versions 9.21.0 to 9.21.26 BIND Supported Preview Edition Versions 9.11.3-S1 to 9.18.50-S1 Versions 9.20.9-S1 to 9.20.29-S1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

Read the full article at Canadian Centre for Cyber Security →

Source attribution: headline and facts are from Canadian Centre for Cyber Security (cyber.gc.ca). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

Barracuda Networks is your new best friend (Barracuda Email Security Gateway Pre-Auth Remote Root RCE CVE-2026-116606 / CVE-2026-111560)

Re: CPython sandbox escape

zlib 1.4 released with security fixes

Re: "sshole": password authentication bypass: OpenSSH + musl libc

CVE-2026-103866: Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling

CVE-2026-103864: Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization