BIND 9 Security Alert: ISC Releases Patches for Trio of Vulnerabilities

The Internet Systems Consortium published a security advisory for BIND 9 describing three vulnerabilities—CVE-2026-3591 (ACL bypass via SIG(0) signed queries), CVE-2026-1519 (resolver CPU exhaustion/DoS via excessive NSEC3 iterations during DNSSEC validation), and CVE-2026-3119 (named crash when processing a correctly signed TKEY requiring a known TSIG). Affected versions and patched releases are listed; ISC advises upgrading to the nearest patched release and provides temporary mitigations such as removing unnecessary TSIG keys or disabling DNSSEC validation (the latter not recommended).