CVE-2026-5946 is a high-severity denial-of-service vulnerability disclosed on May 20, 2026, in ISC BIND 9’s named DNS server, where specially crafted non-Internet-class DNS messages can trigger assertion failures and crash affected authoritative or recursive DNS services. The bug is not...
CVE-2026-3039 is a high-severity remote denial-of-service flaw disclosed on May 20, 2026, in ISC BIND 9, where servers using GSS-API TKEY authentication can leak memory while processing maliciously crafted negotiation packets, eventually exhausting named and breaking DNS service. The bug is not...