ISC BIND Data Processing Errors Vulnerability

Being exploited in the wild

Catalogued 8 October 2026 · US federal remediation deadline 11 October 2026

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for…

Exploit code is also public: Metasploit · Exploit-DB · Public PoC

• Metasploitauxiliary/dos/dns/bind_tkey
• Exploit-DBISC BIND 9 - TKEY (PoC)
• Exploit-DBISC BIND 9 - TKEY Remote Denial of Service (PoC)
• Public PoCrobertdavidgraham/cve-2015-547764 stars
• Public PoCelceef/tkeypoc14 stars
• Public PoChmlio/vaas-cve-2015-54771 stars
• Public PoCknqyf263/cve-2015-54771 stars
• Public PoCilanyu/cve-2015-54771 stars
• Public PoClikekabin/ShareDoc_cve-2015-5477
• Public PoCxycloops123/TKEY-remote-DoS-vulnerability-exploit