ISC BIND security advisory (AV25-693) – Update 1

Serial number: AV25-693
Date: October 22, 2025
Updated: October 29, 2025

On October 22, 2025, ISC published security advisories to address vulnerabilities in the following product:

• ISC BIND 9 – versions 9.11.3-S1 to 9.16.50-S1
• ISC BIND 9 – versions 9.18.11-S1 to 9.18.39-S1
• ISC BIND 9 – versions 9.20.9-S1 to 9.20.13-S1
• ISC BIND 9 – versions 9.11.0 to 9.16.50
• ISC BIND 9 – versions 9.18.0 to 9.18.39
• ISC BIND 9 – versions 9.20.0 to 9.20.13
• ISC BIND 9 – versions 9.21.0 to 9.21.12

Update 1
On October 29, 2025, the Cyber Centre is aware that a proof of concept (PoC) for vulnerability CVE-2025-40778 publicly exists.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• ISC BIND security advisory - CVE-2025-8677
• ISC BIND security advisory - CVE-2025-40778
• ISC BIND security advisory - CVE-2025-40780
• BIND 9 Security Vulnerability Matrix