High-Severity CVE-2026-94300 Affects ISC BIND 9, Poses Remote Code Execution Risk

## Overview CVE-2026-94300 affects ISC BIND 9, a widely used DNS server software. This vulnerability has a CVSS score of 8.1, indicating high severity. It allows attackers to replay GSS-TSIG signed UDP messages, leading to potential memory corruption in the `named` process. ## Technical Details The vulnerability arises when an attacker captures a previously signed UDP message. If the TSIG key remains valid, the attacker can replay this message. Additionally, by sending crafted queries to a zone they control, the attacker may trigger remote code execution. The affected versions include BIND 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, and specific security releases. ## Impact If exploited, this vulnerability can lead to significant security breaches. Attackers could gain control over DNS operations, potentially redirecting traffic or executing arbitrary code on the server. Organizations using affected versions of BIND 9 should prioritize addressing this issue to protect their infrastructure. ## Mitigation Defenders should immediately update their ISC BIND installations to the latest patched versions. The latest releases address this vulnerability and enhance overall security. Regularly monitoring for updates and applying security patches is crucial to mitigate risks associated with vulnerabilities like CVE-2026-94300.