BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
More on Unauthenticated
Other advisories
- CriticalCVE-2026-103409Juniper Session Smart Router and Conductor: two CVSS 9.8 flaws give unauthenticated root (CVE-2026-103409, CVE-2026-103406)
- HighCVE-2026-116690MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
- HighCVE-2026-116690MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source
- CriticalCVE-2026-116692MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
- CriticalCVE-2026-116692MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
- Not ratedosv:CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules
- Not ratedosv:CVE-2026-116690MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
- Lowghsa:GHSA-w44r-93j7-qv28rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
Other news entries
- Hackers Start Probing Fresh Oracle EBS VulnerabilityNewsSecurityWeek
- GitLab critical patches include one for a bug that allows code execution by unauthenticated usersNewsCSO Online
- Two critical PHP flaws put the web on alert as emergency patches arriveNewsCSO Online
- Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesNewsThe Hacker News
- PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP FlawsNewsSecurityWeek
- Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionNewsThe Hacker News
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG ProcessingNewsThe Hacker News
- Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed ModulesNewsThe Hacker News
Source: https://thehackernews.com/2026/09/bind-9-update-fixes-14-flaws-including.html
ID