security_identifier

CVE-2026-77692

Identifier for the BIND flaw in which a DNS-over-HTTPS request carrying a cryptographically invalid SIG(0) record aborts the named process when the sender closes the transport connection early.

Current clusters

security2 publishers

A single DoH request aborts BIND's named before the signature check finishes

ISC fixed fourteen flaws in BIND 9.20.29 and 9.21.26, with no workarounds for any of them. The unauthenticated crash is one of only two that never reached the end-of-life 9.18 branch.

Publishers:securityweek.comthehackernews.com

Reality

Evidence78
Adoption30
Hype gap+5
Incentives45
Confidence76