BIND 9.18 has multiple security vulnerabilities including a denial of service via unbounded processing of crafted DNS messages (CVE-2026-19630), arbitrary code execution via GSS-TSIG UDP message replay, and denial of service via assertion failures in redirect and RPZ query processing. These issues affect versions prior to 9.18.29-14.el9_8.12. A security update is available from Red Hat to address these vulnerabilities.