RHSA-2026:8467 Red Hat Security Advisory: .NET 10.0 security update

Bulletin has no description...

RHSA-2026:8468 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

Bulletin has no description...

CVE-2026-26171 vulnerabilities

Vulnerabilities for packages: promitor, dotnet-sdk, dotnet, dotnet-sdk-stage0, dotnet-bootstrap, powershell...

CVE-2026-33116 vulnerabilities

Vulnerabilities for packages: promitor, dotnet-sdk, dotnet, dotnet-sdk-stage0, dotnet-bootstrap, powershell...

GHSA-37GX-XXP4-5RGX vulnerabilities

Vulnerabilities for packages: promitor, dotnet-sdk, dotnet, dotnet-sdk-stage0, dotnet-bootstrap, powershell...

GHSA-G4VJ-CJJJ-V7HG vulnerabilities

Vulnerabilities for packages: dotnet-sdk-stage0, dotnet-bootstrap, dotnet-sdk, dotnet...

GHSA-W3X6-4M5H-CXQF vulnerabilities

Vulnerabilities for packages: promitor, dotnet-sdk, dotnet, dotnet-sdk-stage0, dotnet-bootstrap, powershell...

GHSA-G4VJ-CJJJ-V7HG vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk-stage0, dotnet-sdk, dotnet-bootstrap, azure-functions-host...

CVE-2026-26171 vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk-stage0, dotnet-sdk, dotnet-bootstrap, powershell, promitor...

GHSA-37GX-XXP4-5RGX vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk-stage0, dotnet-sdk, dotnet-bootstrap, powershell, promitor...

CVE-2026-33116 vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk-stage0, dotnet-sdk, dotnet-bootstrap, powershell, promitor...

GHSA-W3X6-4M5H-CXQF vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk-stage0, dotnet-sdk, dotnet-bootstrap, powershell, promitor...

AlmaLinux 9 : .NET 8.0 (ALSA-2026:8469)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:8469 advisory. dotnet: .NET: Security Bypass and Denial of Service Vulnerability CVE-2026-26171 dotnet: .NET: Denial of Service via stack overflow CVE-2026-32203 dotnet:...

Oracle Linux 9 : .NET / 10.0 (ELSA-2026-8471)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8471 advisory. 10.0.106-1.0.1 - Add support for Oracle Linux 10.0.106-1 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163384 Tenable has extracted...

Oracle Linux 8 : .NET / 9.0 (ELSA-2026-8475)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8475 advisory. 9.0.116-1.0.1 - Add support for Oracle Linux 9.0.116-1 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163389 Tenable has extracted th...

Oracle Linux 8 : .NET / 10.0 (ELSA-2026-8473)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8473 advisory. 10.0.106-1.0.1 - Add support for Oracle Linux 10.0.106-1 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163381 Tenable has extracted...

EUVD-2026-23271

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...

dotnet: .NET: Security Bypass and Denial of Service Vulnerability

A flaw was found in .NET. A remote attacker could exploit a vulnerability related to unsafe transforms in EncryptedXml. This could lead to a Denial of Service DoS, making the service unavailable, and a bypass of security features...

dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform

A flaw was found in .NET. A remote attacker could exploit this vulnerability by crafting a malicious XML document that triggers an infinite recursion within the XmlDecryptionTransform component. This could lead to a Denial of Service DoS, making the affected system unresponsive...

dotnet: .NET: Denial of Service via stack overflow

A flaw was found in .NET. A remote attacker could exploit a stack overflow vulnerability during encrypted key nested decryption, leading to a Denial of Service DoS. This could make the affected system unavailable to legitimate users...