CVE-2026-77119

The record

A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Affected packages

Related vulnerabilities

• CVE-2026-73419 NextAuth.js provides authentication for Next.js. CWE-346
• CVE-2026-54605 OAuth is a Ruby wrapper for the OAuth 1.0 and 1.0a protocols, providing clients and… CWE-346
• CVE-2026-13321 The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field… CWE-346
• CVE-2026-59950 The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context… CWE-346
• CVE-2026-46611 Glances is an open-source system cross-platform monitoring tool. CWE-346
• CVE-2026-55487 pnpm is a package manager. CWE-346
• CVE-2026-54030 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. CWE-346
• CVE-2026-54069 SiYuan is an open-source personal knowledge management system. CWE-346