706,000+ BIND 9 Resolver Instances Vulnerable to Cache Poisoning Exposed Online – PoC Released

A critical logic flaw in BIND 9 resolvers (CVE-2025-40778, CVSS 8.6) allows off‑path attackers to inject unsolicited resource records and poison resolver caches, potentially redirecting traffic; over 706,000 exposed instances were identified and a public PoC exists, so ISC urges immediate patching or temporary mitigations such as restricting recursion and enabling DNSSEC.