CVE-2026-19666 2

Vulnerability (CVE)

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

The Internet Systems Consortium released BIND 9.20.29 and 9.21.26 on 16 September to fix fourteen flaws in its open-source DNS server software, including CVE-2026-77692, which lets an unauthenticated sender crash the named process over DNS-over-HTTPS with...

Vulnerabilities & Patching

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, Click Fix Attacks, Click Fix Surge, and Browser Hijacks

Cyber Risks The Hacker News

Cisco warned of a maximum-severity authentication bypass in Identity Services Engine, tracked as CVE-2026-76460 with a CVSS score of 10.0, that is under active exploitation and stems from insufficient authentication control on an API endpoint. The week's...

Vulnerabilities & Patching