{"schema":"vulnpedia.research/1","cve":"CVE-2026-80274","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://kb.isc.org/docs/cve-2026-80274","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"isc","modified":"2026-09-16T14:07:20.058Z","origins":[{"source":"mitre","sourceId":"isc","modified":"2026-09-16T14:07:20.058Z","url":"https://kb.isc.org/docs/cve-2026-80274"},{"source":"nvd","sourceId":"CVE-2026-80274","modified":"2026-09-17T18:17:09.007","url":"https://kb.isc.org/docs/cve-2026-80274"},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://kb.isc.org/docs/cve-2026-80274"}]},{"url":"https://downloads.isc.org/isc/bind9/9.20.29","tags":["patch","vendor-reference"],"source":"mitre","sourceId":"isc","modified":"2026-09-16T14:07:20.058Z","origins":[{"source":"mitre","sourceId":"isc","modified":"2026-09-16T14:07:20.058Z","url":"https://downloads.isc.org/isc/bind9/9.20.29"},{"source":"nvd","sourceId":"CVE-2026-80274","modified":"2026-09-17T18:17:09.007","url":"https://downloads.isc.org/isc/bind9/9.20.29"},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://downloads.isc.org/isc/bind9/9.20.29"}]},{"url":"https://downloads.isc.org/isc/bind9/9.21.26","tags":["patch","vendor-reference"],"source":"mitre","sourceId":"isc","modified":"2026-09-16T14:07:20.058Z","origins":[{"source":"mitre","sourceId":"isc","modified":"2026-09-16T14:07:20.058Z","url":"https://downloads.isc.org/isc/bind9/9.21.26"},{"source":"nvd","sourceId":"CVE-2026-80274","modified":"2026-09-17T18:17:09.007","url":"https://downloads.isc.org/isc/bind9/9.21.26"},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://downloads.isc.org/isc/bind9/9.21.26"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-80274","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-80274"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535466","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535466"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-80274","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-80274"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80274","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80274"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:75577","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://access.redhat.com/errata/RHSA-2026:75577"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:79162","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://access.redhat.com/errata/RHSA-2026:79162"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:79113","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://access.redhat.com/errata/RHSA-2026:79113"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:75578","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://access.redhat.com/errata/RHSA-2026:75578"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:75767","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://access.redhat.com/errata/RHSA-2026:75767"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:68279","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://access.redhat.com/errata/RHSA-2026:68279"}]},{"source":"euvd","sourceId":"EUVD-2026-80778","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80778","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-80778","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80778"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"AppStream-10.2.Z:bind-32:9.18.33-15.el10_2.12.aarch64","product":"bind-32:9.18.33-15.el10_2.12.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:75577"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind@9.18.33-15.el10_2.12?arch=aarch64&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:bind-chroot-32:9.11.36-16.el8_10.16.s390x","product":"bind-chroot-32:9.11.36-16.el8_10.16.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:79162"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind-chroot@9.11.36-16.el8_10.16?arch=s390x&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:bind-lite-devel-32:9.11.36-16.el8_10.16.x86_64","product":"bind-lite-devel-32:9.11.36-16.el8_10.16.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:79162"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind-lite-devel@9.11.36-16.el8_10.16?arch=x86_64&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:bind-utils-32:9.11.36-16.el8_10.16.ppc64le","product":"bind-utils-32:9.11.36-16.el8_10.16.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:79162"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind-utils@9.11.36-16.el8_10.16?arch=ppc64le&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:bind9.16-utils-debuginfo-32:9.16.23-0.22.el8_10.16.ppc64le","product":"bind9.16-utils-debuginfo-32:9.16.23-0.22.el8_10.16.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:79113"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind9.16-utils-debuginfo@9.16.23-0.22.el8_10.16?arch=ppc64le&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:bind9.18-32:9.18.29-14.el9_8.10.aarch64","product":"bind9.18-32:9.18.29-14.el9_8.10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:75578"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind9.18@9.18.29-14.el9_8.10?arch=aarch64&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:bind-debugsource-32:9.11.36-16.el8_10.16.aarch64","product":"bind-debugsource-32:9.11.36-16.el8_10.16.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:79162"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind-debugsource@9.11.36-16.el8_10.16?arch=aarch64&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"BaseOS-8.10.0.Z.MAIN.EUS:bind-sdb-debuginfo-32:9.11.36-16.el8_10.16.ppc64le","product":"bind-sdb-debuginfo-32:9.11.36-16.el8_10.16.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:79162"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind-sdb-debuginfo@9.11.36-16.el8_10.16?arch=ppc64le&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"CRB-8.10.0.Z.MAIN.EUS:bind9.16-dnssec-utils-debuginfo-32:9.16.23-0.22.el8_10.16.aarch64","product":"bind9.16-dnssec-utils-debuginfo-32:9.16.23-0.22.el8_10.16.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:79113"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind9.16-dnssec-utils-debuginfo@9.16.23-0.22.el8_10.16?arch=aarch64&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"CRB-9.8.0.Z.MAIN.EUS:bind-utils-debuginfo-32:9.16.23-40.el9_8.10.s390x","product":"bind-utils-debuginfo-32:9.16.23-40.el9_8.10.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:75767"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind-utils-debuginfo@9.16.23-40.el9_8.10?arch=s390x&epoch=32","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"Red Hat Hardened Images:bind-utils-0:9.20.29-0.1.hum1@x86_64","product":"bind-utils-0:9.20.29-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:68279"},{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."}],"purl":"pkg:rpm/redhat/bind-utils@9.20.29-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind","product":"bind as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind-devel","product":"bind-devel as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind-export-libs","product":"bind-export-libs as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind-export-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind-libs","product":"bind-libs as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind-license","product":"bind-license as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind-license","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind-pkcs11","product":"bind-pkcs11 as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind-pkcs11","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind-pkcs11-libs","product":"bind-pkcs11-libs as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind-pkcs11-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind-sdb","product":"bind-sdb as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind-sdb","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind-sdb-chroot","product":"bind-sdb-chroot as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind-sdb-chroot","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_7:bind.src","product":"bind.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/bind?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","product":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ose-rhel-coreos-9@4.22.9.8.202609081748-0?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_6:bind","product":"bind as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_6:bind-chroot","product":"bind-chroot as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-chroot","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_6:bind-devel","product":"bind-devel as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_6:bind-sdb","product":"bind-sdb as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-sdb","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_6:bind-utils","product":"bind-utils as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind-utils","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_6:bind.src","product":"bind.src as a component of Red Hat Enterprise Linux 6","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/bind?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_9:dhcp-client","product":"dhcp-client as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dhcp-client","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_9:dhcp-relay","product":"dhcp-relay as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dhcp-relay","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_9:dhcp-server","product":"dhcp-server as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dhcp-server","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]},{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json","productId":"red_hat_enterprise_linux_9:dhcp.src","product":"dhcp.src as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dhcp?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-80274","modified":"2026-10-09T03:40:33+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-80274.json"}]}],"vendorCoverage":{"total":508,"shown":32,"omitted":476,"source":"redhat"}}