security_identifier

CVE-2026-19033

Identifier for the BIND flaw in which a secondary server could serve incremental zone-transfer data before the closing TSIG signature arrived and would not roll back if it never came.

Current clusters

security2 publishers

A single DoH request aborts BIND's named before the signature check finishes

ISC fixed fourteen flaws in BIND 9.20.29 and 9.21.26, with no workarounds for any of them. The unauthenticated crash is one of only two that never reached the end-of-life 9.18 branch.

Publishers:securityweek.comthehackernews.com

Reality

Evidence78
Adoption30
Hype gap+5
Incentives45
Confidence76