Skip to content
brandefense.io
Request A Demo
Trending Vulnerabilities

Why it is trending

CVE-2026-94300

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to

Low
  • CVSS 8.1
  • Public PoC
Buzz
23discussion, 0-100
Danger
38exploitability, 0-100
Mentions
5since 22 Oct 2026
EPSS
0.7%exploit probability
Mentions Per Day · UTCpeak 3
29 days agoToday
Where The Talk Is · by platform5 total
  • X4 mentions · 4 voices
  • GitHub1 mentions · 1 voices · 1 PoC
Newest Public Posts · plain text, newest first

X

  • BIND’s TSIG Replay Bug (CVE-2026-94300) Now Has Public Exploit Code, Remote Code Execution Is Real-Time https://t.co/z2lr2q1heD #cybersecurity #threatintelligence https://t.co/02mZaXBdRv

    @cybr_monk3 h agolikes 0views 2replies 0Open

  • CVE-2026-94300: Concurrent GSS-TSIG messages corrupt memory, in BIND 9. https://t.co/ENznqEg9NV

    @Dinosn19 h agolikes 3views 2,747replies 1Open

  • （緊急）BIND 9.xの脆弱性（DNSサービスの停止・リモートコード実行）について（CVE-2026-94300） - バージョンアップを強く推奨 - https://t.co/Pt6rjJRUAg "本脆弱性により、提供者が意図しないサービスの停止や、リモートコード実行が可能になる可能性があります"

    @catnap70725 h agolikes 2views 190replies 0Open

  • a real DNS user can get terminated CVE-2026-94300 BIND 9 GSS-TSIG 💀 terminate → 🔁 restart → 💀 termiate → 🛡 patch fixes it this is patched in v9.20.30 and its working in v9.20.29 #infosec #cve #dns #dns2shell https://t.co/jWMcpuPNeW

    @rafalohaki26 h agolikes 0views 14replies 0Open

GitHub

  • GitHub cross-source: Ibonok/CVE-2026-94300: CVE-2026-94300: This analysis and PoC were produced substantially with AI assistance ("AI patchwork"). Every code, diff and measurement claim should be verified against the cited sources before being relied upon.

    Ibonok/CVE-2026-9430016 h agostars 0PoCOpen
Public PoC Repositories · third-party code1 links

Links are collected from public posts and are not reviewed by Brandefense. Exploit code can be unsafe or malicious: only study it in an isolated lab, and never run it against systems you do not own.

Get a morning brief and an alert the moment a critical vulnerability like this one starts trending.

Subscribe