CVE-2026-1519

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.5EPSS 2%

Published 2026-03-25Updated 2026-03-25

Media 115

Vulnerability details

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNAisc

EPSS score history

Sources

5 links

PoC links are not available for guest users. Login to view them.

CVEShield CVE Organization RedHat Vuln DB The Hacker News NVD Analysis

Profile

CVSS

7.5

EPSS

Published

2026-03-25

Updated

2026-03-25

CNA

isc

Vendors

ISC

1 product

CPEs

cpe:/o:redhat:rhel_els:6

cpe:/o:redhat:rhel_els:7

cpe:/o:redhat:enterprise_linux_eus:10.0

cpe:/o:redhat:enterprise_linux:10.1

cpe:/a:redhat:enterprise_linux:8::appstream

cpe:/a:redhat:rhel_aus:8.4::appstream

cpe:/a:redhat:rhel_eus_long_life:8.4::appstream

cpe:/a:redhat:rhel_aus:8.6::appstream

cpe:/a:redhat:rhel_e4s:8.6::appstream

cpe:/a:redhat:rhel_eus_long_life:8.6::appstream

cpe:/a:redhat:rhel_tus:8.6::appstream

cpe:/a:redhat:rhel_e4s:8.8::appstream

cpe:/a:redhat:rhel_tus:8.8::appstream

cpe:/a:redhat:rhel_e4s:9.2::appstream

cpe:/a:redhat:rhel_e4s:9.4::appstream

cpe:/a:redhat:rhel_eus:9.6::appstream

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/o:redhat:enterprise_linux:8::baseos

cpe:/o:redhat:rhel_aus:8.4::baseos

cpe:/o:redhat:rhel_eus_long_life:8.4::baseos

cpe:/o:redhat:rhel_aus:8.6::baseos

cpe:/o:redhat:rhel_e4s:8.6::baseos

cpe:/o:redhat:rhel_tus:8.6::baseos

cpe:/o:redhat:rhel_e4s:8.8::baseos

cpe:/o:redhat:rhel_tus:8.8::baseos

cpe:/a:redhat:enterprise_linux:8::crb

cpe:/a:redhat:rhel_eus:9.6::crb

cpe:/a:redhat:enterprise_linux:9::crb

cpe:/a:redhat:hummingbird:1

cpe:/a:redhat:openshift:4

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:openshift:4.19::el9

cpe:/a:redhat:openshift:4.12::el8

cpe:/a:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:8

cpe:/a:redhat:rhel_aus:8.4

cpe:/a:redhat:rhel_eus_long_life:8.4

cpe:/a:redhat:rhel_aus:8.6

cpe:/a:redhat:rhel_eus_long_life:8.6

cpe:/a:redhat:rhel_tus:8.6

cpe:/a:redhat:rhel_e4s:8.6

cpe:/a:redhat:rhel_tus:8.8

cpe:/a:redhat:rhel_e4s:8.8

cpe:/a:redhat:enterprise_linux:9

cpe:/a:redhat:rhel_e4s:9.2

cpe:/a:redhat:rhel_e4s:9.4

cpe:/a:redhat:rhel_eus:9.6

cpe:/a:redhat:openshift:4.13::el9

cpe:/a:redhat:openshift:4.14::el9

cpe:/a:redhat:openshift:4.15::el9

cpe:/a:redhat:openshift:4.17::el9

cpe:/a:redhat:openshift:4.16::el9

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated