Loading vulnerability…
CVE-2026-10822 is a denial-of-service vulnerability in BIND 9 involving malformed DNS key records that use the PRIVATEDNS algorithm value 253. BIND accepts and stores a KEY, DNSKEY, or similar key record whose algorithm identifier length field is larger than the actual identifier data. The invalid structure is not rejected at ingestion time. If BIND later renders that stored record to text, it uses the malformed length during processing, which can trigger an internal consistency check failure and cause the named process to abort and exit unexpectedly. The issue affects BIND 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A BIND denial-of-service vulnerability that can crash named via assertion failure triggered by malformed records or specific query ordering.
A medium-severity remotely exploitable denial-of-service vulnerability in BIND 9 where a malformed DNS key record using the PRIVATEDNS algorithm can be stored and later trigger an abort/exit when rendered to text.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.