Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : .NET vulnerabilities (USN-8958-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8958-1 advisory. It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could...

USN-8958-1: .NET vulnerabilities

It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be incomplete. This issue only affected...

USN-8958-1 dotnet8, dotnet10, dotnet11 vulnerabilities

It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via USN-8942-1, but it was found to be incomplete. This issue only affected...

.NET 10.0 Update - October 25, 2026

.NET 10.0 Update - October 25, 2026 .NET 10.0 has been refreshed with an out-of-band security update as of October 25, 2026. This update is separate from the regular monthly servicing release. See the release notes for details about updated packages. Important: This out-of-band security update...

Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the Blazor WebAssembly debugger included in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applicatio...

GHSA-G27P-QF6J-C96C Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in the Blazor WebAssembly debugger included in Microsoft.AspNetCore.Components.WebAssembly.Server. This advisory also provides guidance on what developers can do to update their applicatio...

Arbitrary Code Injection

Overview Microsoft.AspNetCore.Components.WebAssembly.Server is a runtime server features for ASP.NET Core Blazor applications that have a client running under WebAssembly. Affected versions of this package are vulnerable to Arbitrary Code Injection in the Blazor WebAssembly debug proxy when...

Blazor WebAssembly - Detect

Blazor WebAssembly application was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Blazor WebAssembly application was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Blazor WebAssembly - Detect',...