sirbuvladste/BIND-9-Cache-Poisoning-PoC---CVE-2025-40778

PoC

Proof of Concept for CVE-2025-40778: BIND 9 DNS Cache Poisoning via unsolicited Additional Section records.

view exploit source poc_in_githubauthor sirbuvladstepublished 2026-01-09catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-40778US	—	0.67% (52nd)	Exploit	2025-10-22
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.