High MSRC-CVE-2026-26171 1 CVE

.NET Denial of Service Vulnerability

Published Apr 14, 2026 · Updated Apr 22, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
7.5.6 — https://github.com/PowerShell/Announcements/issues/83
10.0.6 — https://support.microsoft.com/help/5086095
8.0.26 — https://support.microsoft.com/help/5086096
9.0.15 — https://support.microsoft.com/help/5086097

Vulnerabilities 1

High 7.5

CVE-2026-26171

.NET Denial of Service Vulnerability

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Microsoft .NET 8.0 .NET 9.0 PowerShell 7.5 Ubuntu Alpine Wolfi NuGet

Apr 14, 2026

Revision history

2026-04-22 #2
The CVE was updated to links to security updates for Powershell 7.6 and 7.5. Microsoft recommends installing these updates as soon as possible.
2026-04-14 #1
Information published.

References

CVE-2026-26171 .NET Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss