Search: CVE-2026-77119

CVE-2026-77119 is a medium severity vulnerability in ISC BIND 9 involving an origin validation error. The flaw allows a validly signed NSEC3 record from an unrelated sibling zone to be incorrectly accepted as proof of insecurity. This can downgrade a secure delegation and permit acceptance of a forged unsigned DNS answer. The vulnerability affects multiple versions of BIND 9 ranging from 9.11.0 through 9.21.25, including some S1 variants.