CVE-2026-76163
CVE-2026-76163: 2 tracked advisory records across NetApp, Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
NetApp
1 advisory- Advisory severityHigh7.5
High [CVE-2026-76163] ISC BIND Vulnerability in NetApp Products
NTAP-20260930-0005Source published Source updated
ISC BIND versions 9.20.0 through 9.20.27 and 9.21.0 through 9.21.25 are susceptible to a vulnerability which when successfully exploited could allow an attacker to cause BIND to unexpectedly exit resulting in a Denial of Service (DoS). Successful exploitation of this vulnerability could lead to Denial of Service (DoS). NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status. NetApp states there is no workaround available at this time.
- Affected products in this advisory
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- 9.20.0
- 9.20.27
- 9.21.0
- 9.21.25
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Red Hat
1 advisory- Advisory severityHigh7.5
High [CVE-2026-76163] Denial of Service via TKEY query with specific configuration
CVE-2026-76163Source published Source updated
Denial of Service via TKEY query with specific configuration. Red Hat rates this important (CVSS 7.5). Weakness: CWE-617. Red Hat lists fixing advisory RHSA-2026:68279 with package bind-main-9.20.29-0.1.hum1. Affected product named by the advisory: Red Hat Hardened Images.
- Related products — impact not confirmed
- Red Hat Hardened Images
- Source-reported affected versions
- 9.20.0
- 9.20.27
- 9.21.0
- 9.21.25
1 more entries in the full advisory.
- Source-reported fixed versions
- bind-main-9.20.29-0.1.hum1
- RHSA-2026:68279
- Mitigation guidance
- To mitigate this issue, ensure that the BIND configuration file (`named.conf`) includes a global `options` block. If no such block exists, adding an empty `options {}` block will prevent the vulnerability. After modifying `named.conf`, the `named` service must be restarted for the changes to take effect. This may temporarily interrupt DNS resolution.
Android app · Google Play
Turn CVE research into alerts on your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.