CVE-2026-10723

ADVISORY - debian

Summary

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

bind9 1:9.20.26-1 https://kb.isc.org/docs/cve-2026-10723

EPSS Score⁠: 0.00266 (0.183)

Common Weakness Enumeration (CWE)

ADVISORY - redhat

CWE-345⁠

Insufficient Verification of Data Authenticity

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.