Skip to content
Sign in

ISC product

BIND

Alert
No CISA KEV deadline is open. CISA last added a BIND CVE on 8 Oct.

Tracked since 26 Mar · latest article 11 Oct · RSS · API

0Open KEV deadlines

None open

1Added to KEV · 90 days

of 1 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date1

BIND CVEs in CISA KEV with their federal deadlines. None is open.

Exploited BIND CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2015-5477BIND8 OctPassed 11 Oct5
Vendor CSV of 1 entry for ISCAll 1 vendor entry, including other products.

Patch cadence and exploit odds

How often CISA adds BIND CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’260Q2 ’260Q3 ’261Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20261

Fix listed

18 of 18 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2015-5477: 99.9th percentile, in CISA KEVCVE-2026-77692: 93.8th percentileCVE-2026-5946: 80.1th percentileCVE-2026-1519: 77th percentileCVE-2026-3593: 74.9th percentileCVE-2026-5947: 72.1th percentileCVE-2026-3039: 65.3th percentileCVE-2026-3104: 53.6th percentileCVE-2026-5950: 51.4th percentileCVE-2026-3119: 48th percentileCVE-2026-19667: 47.1th percentileCVE-2026-81563: 47.1th percentileCVE-2026-76163: 47.1th percentileCVE-2026-80274: 47.1th percentileCVE-2026-19666: 47th percentileCVE-2026-3592: 34.8th percentileCVE-2026-3591: 30.5th percentileCVE-2026-13321: 10.8th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2015-547799.9
CVE-2026-7769293.8
CVE-2026-594680.1
CVE-2026-151977
CVE-2026-359374.9
CVE-2026-594772.1
CVE-2026-303965.3
CVE-2026-310453.6
CVE-2026-595051.4
CVE-2026-311948
CVE-2026-1966747.1
CVE-2026-8156347.1
CVE-2026-7616347.1
CVE-2026-8027447.1
CVE-2026-1966647
CVE-2026-359234.8
CVE-2026-359130.5
CVE-2026-1332110.8

Coverage9 articles · all time

The latest 9 articles naming BIND, in the shared story grammar.

Full timeline
Quiet for 3 weekslast report 11 Oct9 articles5 outlets

9 articles from 5 outlets since 26 Mar. Quiet since 11 Oct.

Now26 Mar24 May21 Jul15 Sep26391523First reportSecurityWeek · 26 Mar, 13:51CISA alert8 Oct, 19:02 · officialExploited CVESecurityOnline · 23 Jul
  • Thu 26 Mar, 13:51 UTC. SecurityWeek, first report. BIND Updates Patch High-Severity Vulnerabilities.
  • Tue 26 May, 11:01 UTC. SecurityOnline, its first report on the story. BIND 9 flaws let attackers crash DNS and drain bandwidth.
  • Thu 23 Jul, 04:07 UTC. SecurityOnline. Two Active BIND Exploits Highlighted as Nine Flaws Patched. Cites a CVE in CISA KEV.
  • Thu 17 Sep, 13:01 UTC. SecurityWeek. ISC Fixes 14 BIND Flaws Allowing Remote DNS Server Crashes.
  • Thu 8 Oct, 18:48 UTC. The Hacker News, its first report on the story. China-Based Hackers Accused of Stealing Emails Across 7 Countries. Cites a CVE in CISA KEV.
  • Thu 8 Oct, 19:02 UTC. CISA, its first report on the story. CISA Flags Exploited BIND Flaw That Can Take DNS Servers Offline. Cites a CVE in CISA KEV.
  • Fri 9 Oct, 07:31 UTC. SecurityOnline. CISA Flags Five Actively Exploited Flaws in Enterprise Tools. Cites a CVE in CISA KEV.
  • Fri 9 Oct, 12:50 UTC. The Hacker News. CISA Adds Five Flaws to KEV After Flax Typhoon Attacks. Cites a CVE in CISA KEV.
  • Sun 11 Oct, 10:01 UTC. Security Affairs, its first report on the story. CISA Flags Five Exploited Flaws in China Linked Cyber Campaign. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Square: official source
  • Coverage over time
  • Quiet time, folded
Show all 9 articles as a list
  1. Thu 26 MarDay 01
    1. BIND Updates Patch High-Severity Vulnerabilities13:51 · SecurityWeek · First report

  2. Quiet for 9 weeks

    Tue 26 MayDay 611
    1. BIND 9 flaws let attackers crash DNS and drain bandwidth11:01 · SecurityOnline · Picked up again

  3. Quiet for 8 weeks

    Thu 23 JulDay 1191
    1. Two Active BIND Exploits Highlighted as Nine Flaws Patched04:07 · SecurityOnline · Exploited CVE · Picked up again · Known exploited CVE

  4. Quiet for 8 weeks

    Thu 17 SepDay 1751
    1. ISC Fixes 14 BIND Flaws Allowing Remote DNS Server Crashes13:01 · SecurityWeek · Picked up again

  5. Quiet for 3 weeks

    Thu 8 OctDay 1962
    1. China-Based Hackers Accused of Stealing Emails Across 7 Countries18:48 · The Hacker News · Picked up again · Known exploited CVE
    2. CISA Flags Exploited BIND Flaw That Can Take DNS Servers Offline19:02 · CISA · official · CISA alert · Known exploited CVE
  6. Fri 9 OctDay 1972
    1. CISA Flags Five Actively Exploited Flaws in Enterprise Tools07:31 · SecurityOnline · Known exploited CVE
    2. CISA Adds Five Flaws to KEV After Flax Typhoon Attacks12:50 · The Hacker News · Known exploited CVE

  7. Quiet for 2 days

    Sun 11 OctDay 1991
    1. CISA Flags Five Exploited Flaws in China Linked Cyber Campaign10:01 · Security Affairs · Known exploited CVE

All CVEs in coverage18

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2015-5477Exploited

    ISC BIND Data Processing Errors Vulnerability

    7.5High99.5% EPSS · 5 articles
  • CVE-2026-77692

    ISC BIND 9 vulnerability

    7.5High6.6% EPSS · 1 article
  • CVE-2026-5946

    ISC BIND 9 vulnerability

    7.5High1.9% EPSS · 1 article
  • CVE-2026-1519

    Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

    7.5High1.7% EPSS · 1 article
  • CVE-2026-3593

    ISC BIND 9 vulnerability

    7.4High1.5% EPSS · 1 article
  • CVE-2026-5947

    ISC BIND 9 vulnerability

    7.5High1.4% EPSS · 1 article
  • CVE-2026-3039

    ISC BIND 9 vulnerability

    7.5High1.1% EPSS · 1 article
  • CVE-2026-3104

    Memory leak in code preparing DNSSEC proofs of non-existence

    7.5High0.7% EPSS · 1 article
  • CVE-2026-5950

    ISC BIND 9 vulnerability

    5.3Medium0.7% EPSS · 1 article
  • CVE-2026-3119

    Authenticated query containing a TKEY record may cause named to terminate unexpectedly

    6.5Medium0.6% EPSS · 1 article
  • CVE-2026-19667

    ISC BIND 9 vulnerability

    7.5High0.6% EPSS · 1 article
  • CVE-2026-81563

    ISC BIND 9 vulnerability

    7.5High0.6% EPSS · 1 article
Show 6 more CVEs
  • CVE-2026-76163

    ISC BIND 9 vulnerability

    7.5High0.6% EPSS · 1 article
  • CVE-2026-80274

    ISC BIND 9 vulnerability

    7.5High0.6% EPSS · 1 article
  • CVE-2026-19666

    ISC BIND 9 vulnerability

    7.5High0.6% EPSS · 1 article
  • CVE-2026-3592

    ISC BIND 9 vulnerability

    5.3Medium0.4% EPSS · 1 article
  • CVE-2026-3591

    A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass

    5.4Medium0.4% EPSS · 1 article
  • CVE-2026-13321

    ISC BIND 9 vulnerability

    8.6High0.2% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in