A vulnerability labeled as problematic has been found in ISC BIND up to 9.18.48/9.18.48-S1/9.20.22/9.20.22-S1/9.21.21. This affects an unknown function of the component Resolver State Machine. The manipulation results in unchecked input for loop condition.

This vulnerability was named CVE-2026-5950. The attack may be performed from remote. There is no available exploit.