An 11 Year Old BIND Bug Just Joined CISA Known Exploited Vulnerabilities CVE-2015-5477 was added to CISA KEV on October 8, 2026, confirming active exploitation of an unpatched BIND DoS flaw over a decade after it was first fixed. Oct 12, 2026 5 min read Security