Exploited in the wild. CISA added it to its Known Exploited Vulnerabilities list on 8 Oct 2026.
99.58%
Reading the vendor advisory
Fix it in your code
Each opens with a short prompt that points at Global Hack Map's public runbook for CVE-2015-5477. Nothing runs until you send it.
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.
You are affected if
The fix