CVE-2026-13204

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.24 BIND 9 versions 9.21.0 through 9.21.23 BIND 9 versions 9.11.3-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.24-S1

Description BIND may exit unexpectedly with an assertion during the validation of a proof for a provably insecure domain. This occurs when the domain is covered by both an NSEC (Next Secure) and NSEC3 (Next Secure version 3) record at the parent, but an RRSIG (Resource Record Signature) exists for only one of these record types.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.