RockyLinux 8 : .NET 10.0 (RLSA-2026:68676)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:68676 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege...

BIT-DOTNET-2025-7326 EOL ASP.NET Core Elevation of Privilege Vulnerability

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life EOL software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry...

BIT-DOTNET-SDK-2025-7326 EOL ASP.NET Core Elevation of Privilege Vulnerability

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life EOL software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry...

BIT-ASPNET-CORE-2025-7326 EOL ASP.NET Core Elevation of Privilege Vulnerability

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life EOL software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry...

EUVD-2026-82596

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82598

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

EUVD-2026-82586

Azure Arc Elevation of Privilege Vulnerability...

EUVD-2026-82585

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69843

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62874: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85878: Improper Authorization

Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network...

CVE-2026-69843: Authentication Bypass by Spoofing

Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network...

MiracleLinux 8 : dotnet9.0-9.0.121-1.el8_10 (AXSA:2026-1881:18)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1881:18 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege...

Microsoft Edge (Chromium) < 153.0.4234.48 (CVE-2026-88097)

The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.48. It is, therefore, affected by a vulnerability as referenced in the September 18, 2026 advisory. - Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges...

AlmaLinux 10 : .NET 10.0 (ALSA-2026:67530)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67530 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege...

CVE-2026-77903

Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69399

Azure Arc Elevation of Privilege Vulnerability...

CVE-2026-69399

Azure Arc is affected by an Elevation of Privilege vulnerability (CVE-2026-69399) rated CRITICAL with a CVSS 3.1 score of 10.0 . The attack vector is network-based , requires no privileges and no user interaction , and has changed scope with high impact on confidentiality, integrity, and availabi...

CVE-2026-69865

Microsoft Container Registry is affected by an authorization bypass through user-controlled key , allowing an unauthorized attacker to elevate privileges over a network . The CVSS v3.1 base score is 10.0 (Critical) with a changed scope and high impact to both confidentiality and integrity, while ...

Important: Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update

An update for .NET 10.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...