High ELSA-2026-92431 1 CVE

Important: .NET 10.0 security, bug fix, and enhancement update (Oracle Linux 8)

Published Nov 3, 2026 · Updated Nov 3, 2026

Ecosystem: Oracle Linux

Summary

[10.0.114-1.0.2]
- Add support for Oracle Linux
- build dotnet-host

[10.0.114-1]
- Update to .NET SDK 10.0.114 and Runtime 10.0.14
- Resolves: RHEL-291741

[10.0.113-2]
- Update to .NET SDK 10.0.113 and Runtime 10.0.13
- Resolves: RHEL-277805

Fixed packages 15

Release	Package	Fixed in
Oracle Linux · 8	aspnetcore-runtime-10.0	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	aspnetcore-runtime-dbg-10.0	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	aspnetcore-targeting-pack-10.0	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	dotnet	0:10.0.114-1.0.2.el8_10
Oracle Linux · 8	dotnet-apphost-pack-10.0	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	dotnet-host	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	dotnet-hostfxr-10.0	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	dotnet-runtime-10.0	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	dotnet-runtime-dbg-10.0	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	dotnet-sdk-10.0	0:10.0.114-1.0.2.el8_10
Oracle Linux · 8	dotnet-sdk-10.0-source-built-artifacts	0:10.0.114-1.0.2.el8_10
Oracle Linux · 8	dotnet-sdk-aot-10.0	0:10.0.114-1.0.2.el8_10
Oracle Linux · 8	dotnet-sdk-dbg-10.0	0:10.0.114-1.0.2.el8_10
Oracle Linux · 8	dotnet-targeting-pack-10.0	0:10.0.14-1.0.2.el8_10
Oracle Linux · 8	dotnet-templates-10.0	0:10.0.114-1.0.2.el8_10

Vulnerabilities 1

High 7.8

CVE-2026-114148 Public exploit

ASP.NET Core Elevation of Privilege Vulnerability

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

Microsoft .NET 11.0 installed on Windows .NET 11.0 installed on Linux .NET 11.0 installed on Mac OS Linux Windows macOS Ubuntu Alpine

Oct 29, 2026