bind 9 security

On May 20, 2026, ISC disclosed CVE-2026-5950, a medium-severity flaw in the BIND 9 recursive resolver that can send affected servers into an unbounded resend loop and drain resources under attacker-controlled query conditions. Microsoft’s Security Response Center is tracking the same issue...