BIND 9 patches 14 flaws that enable DNS cache poisoning and DNSSEC bypass
On 16 September 2026, ISC shipped BIND 9.20.29 and 9.21.26, fixing 14 vulnerabilities including DNS cache-poisoning flaws and DNSSEC-validation bypasses. Upgrade exposed recursive resolvers and lock down recursion before a forged response redirects your users.