Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-hcsq-5yqs-6fem
Vulnerability ID VCID-hcsq-5yqs-6fem
Aliases CVE-2007-2926
Summary The ISC BIND random number generator uses a weak algorithm, making it easier to guess the next query ID and perform a DNS cache poisoning attack.
Status Published
Exploitability 2.0
Weighted Severity 0.2
Risk 0.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
epss 0.2056 https://api.first.org/data/v1/epss?cve=CVE-2007-2926
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2926.json
https://api.first.org/data/v1/epss?cve=CVE-2007-2926
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2926
248851 https://bugzilla.redhat.com/show_bug.cgi?id=248851
CVE-2007-2926 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/4266.py
GLSA-200708-13 https://security.gentoo.org/glsa/200708-13
RHSA-2007:0740 https://access.redhat.com/errata/RHSA-2007:0740
USN-491-1 https://usn.ubuntu.com/491-1/
Data source Exploit-DB
Date added Aug. 6, 2007
Description BIND 9 0.3beta - DNS Cache Poisoning
Ransomware campaign use Known
Source publication date Aug. 7, 2007
Exploit type remote
Platform multiple
Source update date Oct. 12, 2016
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.95538
EPSS Score 0.2056
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:03:05.082887+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200708-13 38.0.0