{"schema":"vulnpedia.research/1","cve":"CVE-2026-77692","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://kb.isc.org/docs/cve-2026-77692","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"isc","modified":"2026-09-16T13:55:45.110Z","origins":[{"source":"mitre","sourceId":"isc","modified":"2026-09-16T13:55:45.110Z","url":"https://kb.isc.org/docs/cve-2026-77692"},{"source":"nvd","sourceId":"CVE-2026-77692","modified":"2026-09-17T19:16:59.633","url":"https://kb.isc.org/docs/cve-2026-77692"},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://kb.isc.org/docs/cve-2026-77692"}]},{"url":"https://downloads.isc.org/isc/bind9/9.20.29","tags":["patch","vendor-reference"],"source":"mitre","sourceId":"isc","modified":"2026-09-16T13:55:45.110Z","origins":[{"source":"mitre","sourceId":"isc","modified":"2026-09-16T13:55:45.110Z","url":"https://downloads.isc.org/isc/bind9/9.20.29"},{"source":"nvd","sourceId":"CVE-2026-77692","modified":"2026-09-17T19:16:59.633","url":"https://downloads.isc.org/isc/bind9/9.20.29"},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://downloads.isc.org/isc/bind9/9.20.29"}]},{"url":"https://downloads.isc.org/isc/bind9/9.21.26","tags":["patch","vendor-reference"],"source":"mitre","sourceId":"isc","modified":"2026-09-16T13:55:45.110Z","origins":[{"source":"mitre","sourceId":"isc","modified":"2026-09-16T13:55:45.110Z","url":"https://downloads.isc.org/isc/bind9/9.21.26"},{"source":"nvd","sourceId":"CVE-2026-77692","modified":"2026-09-17T19:16:59.633","url":"https://downloads.isc.org/isc/bind9/9.21.26"},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://downloads.isc.org/isc/bind9/9.21.26"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-77692","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-77692"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535462","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535462"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-77692","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-77692"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77692","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-77692"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:68279","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://access.redhat.com/errata/RHSA-2026:68279"}]},{"source":"euvd","sourceId":"EUVD-2026-80766","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80766","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-80766","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80766"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-0:9.20.29-0.1.hum1@aarch64","product":"bind-0:9.20.29-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind@9.20.29-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-0:9.20.29-0.1.hum1@src","product":"bind-0:9.20.29-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind@9.20.29-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-0:9.20.29-0.1.hum1@x86_64","product":"bind-0:9.20.29-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind@9.20.29-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-chroot-0:9.20.29-0.1.hum1@aarch64","product":"bind-chroot-0:9.20.29-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-chroot@9.20.29-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-chroot-0:9.20.29-0.1.hum1@x86_64","product":"bind-chroot-0:9.20.29-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-chroot@9.20.29-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-devel-0:9.20.29-0.1.hum1@aarch64","product":"bind-devel-0:9.20.29-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-devel@9.20.29-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-devel-0:9.20.29-0.1.hum1@x86_64","product":"bind-devel-0:9.20.29-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-devel@9.20.29-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-dnssec-utils-0:9.20.29-0.1.hum1@aarch64","product":"bind-dnssec-utils-0:9.20.29-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-dnssec-utils@9.20.29-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-dnssec-utils-0:9.20.29-0.1.hum1@x86_64","product":"bind-dnssec-utils-0:9.20.29-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-dnssec-utils@9.20.29-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-doc-0:9.20.29-0.1.hum1@noarch@public-hummingbird-aarch64-rpms","product":"bind-doc-0:9.20.29-0.1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-doc@9.20.29-0.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-doc-0:9.20.29-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"bind-doc-0:9.20.29-0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-doc@9.20.29-0.1.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-libs-0:9.20.29-0.1.hum1@aarch64","product":"bind-libs-0:9.20.29-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-libs@9.20.29-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-libs-0:9.20.29-0.1.hum1@x86_64","product":"bind-libs-0:9.20.29-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-libs@9.20.29-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-utils-0:9.20.29-0.1.hum1@aarch64","product":"bind-utils-0:9.20.29-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-utils@9.20.29-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"Red Hat Hardened Images:bind-utils-0:9.20.29-0.1.hum1@x86_64","product":"bind-utils-0:9.20.29-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, restrict access to the BIND service to trusted clients only, or disable DNS-over-HTTPS if it is not required.\nTo restrict network access to the BIND service, configure firewall rules to only allow connections from trusted IP ranges to port 53 (UDP and TCP). For example, using `firewalld`:\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"udp\" accept'`\n`firewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<TRUSTED_IP_RANGE>\" port port=\"53\" protocol=\"tcp\" accept'`\n`firewall-cmd --reload`\nIf DNS-over-HTTPS is enabled and not essential, consider disabling it in the BIND configuration. Refer to the BIND administrator's reference manual for instructions on disabling DNS-over-HTTPS. Changes to BIND configuration require a restart of the `named` service for them to take effect."}],"purl":"pkg:rpm/redhat/bind-utils@9.20.29-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_10:bind","product":"bind as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_10:bind-libs","product":"bind-libs as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_6:bind-devel","product":"bind-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_7:bind","product":"bind as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_7:bind-libs-lite","product":"bind-libs-lite as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-libs-lite","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_7:bind-pkcs11-libs","product":"bind-pkcs11-libs as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-pkcs11-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_7:bind.src","product":"bind.src as a component of Red Hat Enterprise Linux 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_8:bind-libs","product":"bind-libs as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_8:bind-pkcs11-devel","product":"bind-pkcs11-devel as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-pkcs11-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_8:bind-utils","product":"bind-utils as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-utils","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_8:bind9.16-doc","product":"bind9.16-doc as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind9.16-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_8:python3-bind","product":"python3-bind as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/python3-bind","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_9:bind-dnssec-doc","product":"bind-dnssec-doc as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-dnssec-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_9:bind.src","product":"bind.src as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_9:bind9.18-doc","product":"bind9.18-doc as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind9.18-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_enterprise_linux_9:dhcp-relay","product":"dhcp-relay as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dhcp-relay","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]},{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/ose-rhel-coreos-9@4.22.9.8.202609081748-0?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-77692","modified":"2026-09-21T10:39:43+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-77692.json"}]}],"vendorCoverage":{"total":102,"shown":32,"omitted":70,"source":"redhat"}}