ZeroDay Findings
Sign inSign up

Findings

CVE-2026-5946

Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-cl…

Published May 20, 2026 · updated Sep 17, 2026 · isc bind

Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-classes ( or ) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates ( ), zone change notifications ( ), or processing of -specific record types in non- data — can cause assertion failures in . This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 20, 2026 · NIST NVD

    Detected

    Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-classes ( or ) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates ( ), zone change notifications ( ), or processing of -specific record types in non- data — can cause asser

  2. Sep 17, 2026 · NIST NVD

    Updated

    Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-classes ( or ) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates ( ), zone change notifications ( ), or processing of -specific record types in non- data — can cause asser

Affected

  • cpe isc/bindversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-5946

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5946

    Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-classes ( or ) in the question section. Specially crafted requests reaching t

    nvd.nist.gov

References