This article was collected and archived by Digital Sovereignty Watch from an institutional or public source relevant to digital sovereignty, technology policy, cybersecurity, cloud services, artificial intelligence or European regulation.
Cybersecurity
"BIND 9" Software Vulnerabilities
A critical vulnerability and several high-severity vulnerabilities have been discovered in BIND 9 DNS server software (CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, and CVE-2026-97313). Under certain conditions, one of the vulnerabilities (CVE-2026-94300) could allow an attacker to remotely execute arbitrary code. This vulnerability has been rated 8.1 on the CVSS scale, while the other three vulnerabilities have each been rated 7.5. Exploitation of the remaining vulnerabilities could cause DNS server malfunctions, excessive consumption of processor and memory resources, or denial of service (DoS). The vulnerabilities affect several versions of "BIND 9", including the 9.18, 9.20, and 9.21 branches. The developer, Internet Systems Consortium (ISC), urges users to update the software as soon as possible to the fixed version for the relevant branch. More information: https://kb.isc.org/docs/all-bind-advisories