High severity7.5NVD Advisory· Published Sep 16, 2026· Updated Sep 17, 2026
CVE-2026-76163
CVE-2026-76163
Description
If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
3News mentions
4- ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser HijacksThe Hacker News · Sep 21, 2026
- ISC Patches 14 Vulnerabilities in BIND 9 Security UpdateSecurityWeek · Sep 17, 2026
- BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPSThe Hacker News · Sep 17, 2026
- ISC Patches 14 BIND 9 Vulnerabilities, Primarily Causing Denial-of-ServiceVypr Intelligence · Sep 16, 2026