Description
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | .NET 10.0 installed on Linux | 10.0.0 – < 10.0.403 | 10.0.403 |
| Microsoft | .NET 10.0 installed on Mac OS | 10.0.0 – < 10.0.403 | 10.0.403 |
| Microsoft | .NET 10.0 installed on Windows | 10.0.0 – < 10.0.403 | 10.0.403 |
| Microsoft | .NET 11.0 installed on Linux | 11.0.0-preview.1 – < 11.0.100-rc.3 | 11.0.100-rc.3 |
| Microsoft | .NET 11.0 installed on Mac OS | 11.0.0-preview.1 – < 11.0.100-rc.3 | 11.0.100-rc.3 |
| Microsoft | .NET 11.0 installed on Windows | 11.0.0-preview.1 – < 11.0.100-rc.3 | 11.0.100-rc.3 |
| Microsoft | .NET 8.0 installed on Linux | 8.0.0 – < 8.0.427 | 8.0.427 |
| Microsoft | .NET 8.0 installed on Mac OS | 8.0.0 – < 8.0.427 | 8.0.427 |
| Microsoft | .NET 8.0 installed on Windows | 8.0.0 – < 8.0.427 | 8.0.427 |
| Microsoft | .NET 9.0 installed on Linux | 9.0.0 – < 9.0.320 | 9.0.320 |
| Microsoft | .NET 9.0 installed on Mac OS | 9.0.0 – < 9.0.320 | 9.0.320 |
| Microsoft | .NET 9.0 installed on Windows | 9.0.0 – < 9.0.320 | 9.0.320 |
| Microsoft | .NET source-build Linux tarballs (all archive types) | 8.0.100 – < 10.0.403-servicing.26523.112 | 10.0.403-servicing.26523.112 |
| Microsoft | ASP.NET Core runtime and targeting-pack Linux tarballs (Microsoft-published) | 8.0.0 – < 9.0.22 | 9.0.22 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | dotnet10 | 10.0.114-10.0.14-0ubuntu1~26.10.1 | USN-8958-1 |
| Ubuntu 26.10 | dotnet11 | 11.0.100-11.0.0~rc3-0ubuntu1~26.10.1 | USN-8958-1 |
| Ubuntu 26.04 LTS | dotnet10 | 10.0.114-10.0.14-0ubuntu1~26.04.1 | USN-8958-1 |
| Ubuntu 24.04 LTS | dotnet10 | 10.0.114-10.0.14-0ubuntu1~24.04.1 | USN-8958-1 |
| Ubuntu 24.04 LTS | dotnet8 | 8.0.133-8.0.33-0ubuntu1~24.04.1 | USN-8958-1 |
| Ubuntu 22.04 LTS | dotnet6 +1 | No fix yet | — |
| Ubuntu 22.04 LTS | dotnet8 | 8.0.133-8.0.33-0ubuntu1~22.04.1 | USN-8958-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | dotnet-host +8 | 10.0.14-1.el10_2 | RHSA-2026:98627, RHSA-2026:92438 |
| RHEL 10 | dotnet-hostfxr-11.0 +7 | 11.0.0~rc.3.26522.148-0.11.el10_3 | RHSA-2026:98627 |
| RHEL 10 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.el10_2 | RHSA-2026:92428 |
| RHEL 10 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.el10_2 | RHSA-2026:92430 |
| RHEL 10 | dotnet10.0 +5 | 10.0.114-1.el10_2 | RHSA-2026:92438 |
| RHEL 10 | dotnet11.0 +5 | 11.0.100~rc.3.26522.148-0.11.el10_3 | RHSA-2026:98627 |
| RHEL 10 | dotnet8.0 +4 | 8.0.133-1.el10_2 | RHSA-2026:92428 |
| RHEL 10 | dotnet9.0 +6 | 9.0.123-1.el10_2 | RHSA-2026:92430 |
| RHEL 9 | dotnet-host +8 | 10.0.14-1.el9_8 | RHSA-2026:99170, RHSA-2026:92432 |
| RHEL 9 | dotnet-hostfxr-11.0 +7 | 11.0.0~rc.3.26522.148-0.12.el9_9 | RHSA-2026:99170 |
| RHEL 9 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.el9_8 | RHSA-2026:92492 |
| RHEL 9 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.el9_8 | RHSA-2026:92429 |
| RHEL 9 | dotnet10.0 +5 | 10.0.114-1.el9_8 | RHSA-2026:92432 |
| RHEL 9 | dotnet11.0 +5 | 11.0.100~rc.3.26522.148-0.12.el9_9 | RHSA-2026:99170 |
| RHEL 9 | dotnet8.0 +4 | 8.0.133-1.el9_8 | RHSA-2026:92492 |
| RHEL 9 | dotnet9.0 +6 | 9.0.123-1.el9_8 | RHSA-2026:92429 |
| RHEL 8 | dotnet +6 | 11.0.100~rc.3.26522.148-0.12.el8_10 | RHSA-2026:92511 |
| RHEL 8 | dotnet-host +8 | 11.0.0~rc.3.26522.148-0.12.el8_10 | RHSA-2026:92511 |
| RHEL 8 | dotnet-hostfxr-10.0 +7 | 10.0.14-1.el8_10 | RHSA-2026:92431 |
| RHEL 8 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.el8_10 | RHSA-2026:92420 |
| RHEL 8 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.el8_10 | RHSA-2026:92427 |
| RHEL 8 | dotnet10.0 +5 | 10.0.114-1.el8_10 | RHSA-2026:92431 |
| RHEL 8 | dotnet8.0 +4 | 8.0.133-1.el8_10 | RHSA-2026:92420 |
| RHEL 8 | dotnet9.0 +6 | 9.0.123-1.el8_10 | RHSA-2026:92427 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | dotnet-host +8 | 9.0.22-1.el10_0 | RHSA-2026:93458 |
| RHEL 10.0 EUS | dotnet-hostfxr-8.0 +7 | 8.0.33-1.el10_0 | RHSA-2026:93455 |
| RHEL 10.0 EUS | dotnet8.0 +4 | 8.0.133-1.el10_0 | RHSA-2026:93455 |
| RHEL 10.0 EUS | dotnet9.0 +6 | 9.0.123-1.el10_0 | RHSA-2026:93458 |
| RHEL 9.6 EUS | dotnet-host +8 | 9.0.22-1.el9_6 | RHSA-2026:93459 |
| RHEL 9.6 EUS | dotnet-hostfxr-8.0 +7 | 8.0.33-1.el9_6 | RHSA-2026:93457 |
| RHEL 9.6 EUS | dotnet8.0 +4 | 8.0.133-1.el9_6 | RHSA-2026:93457 |
| RHEL 9.6 EUS | dotnet9.0 +6 | 9.0.123-1.el9_6 | RHSA-2026:93459 |
| RHEL 9.4 E4S | dotnet-host +8 | 8.0.33-1.el9_4 | RHSA-2026:93456 |
| RHEL 9.4 E4S | dotnet8.0 +4 | 8.0.133-1.el9_4 | RHSA-2026:93456 |
| Red Hat Hardened Images 1 | dotnet-hostfxr-8.0 +7 | 8.0.33-0.1.hum1 | RHSA-2026:91709 |
| Red Hat Hardened Images 1 | dotnet8.0 +4 | 8.0.133-0.1.hum1 | RHSA-2026:91709 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | dotnet-host +8 | 10.0.14-1.el10_2 | ALSA-2026:92438 |
| AlmaLinux 10 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.el10_2 | ALSA-2026:92428 |
| AlmaLinux 10 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.el10_2 | ALSA-2026:92430 |
| AlmaLinux 10 | dotnet-sdk-10.0 +4 | 10.0.114-1.el10_2 | ALSA-2026:92438 |
| AlmaLinux 10 | dotnet-sdk-8.0 +3 | 8.0.133-1.el10_2 | ALSA-2026:92428 |
| AlmaLinux 10 | dotnet-sdk-9.0 +5 | 9.0.123-1.el10_2 | ALSA-2026:92430 |
| AlmaLinux 9 | dotnet-host +8 | 10.0.14-1.el9_8 | ALSA-2026:92432 |
| AlmaLinux 9 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.el9_8 | ALSA-2026:92492 |
| AlmaLinux 9 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.el9_8 | ALSA-2026:92429 |
| AlmaLinux 9 | dotnet-sdk-10.0 +4 | 10.0.114-1.el9_8 | ALSA-2026:92432 |
| AlmaLinux 9 | dotnet-sdk-8.0 +3 | 8.0.133-1.el9_8 | ALSA-2026:92492 |
| AlmaLinux 9 | dotnet-sdk-9.0 +5 | 9.0.123-1.el9_8 | ALSA-2026:92429 |
| AlmaLinux 8 | dotnet +5 | 11.0.100~rc.3.26522.148-0.12.el8_10 | ALSA-2026:92511 |
| AlmaLinux 8 | dotnet-host +8 | 11.0.0~rc.3.26522.148-0.12.el8_10 | ALSA-2026:92511 |
| AlmaLinux 8 | dotnet-hostfxr-10.0 +7 | 10.0.14-1.el8_10 | ALSA-2026:92431 |
| AlmaLinux 8 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.el8_10 | ALSA-2026:92420 |
| AlmaLinux 8 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.el8_10 | ALSA-2026:92427 |
| AlmaLinux 8 | dotnet-sdk-10.0 +4 | 10.0.114-1.el8_10 | ALSA-2026:92431 |
| AlmaLinux 8 | dotnet-sdk-8.0 +3 | 8.0.133-1.el8_10 | ALSA-2026:92420 |
| AlmaLinux 8 | dotnet-sdk-9.0 +5 | 9.0.123-1.el8_10 | ALSA-2026:92427 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | dotnet-host +8 | 11.0.0~rc.3.26522.148-0.11.el10_3 | RLSA-2026:98627 |
| Rocky Linux 10 | dotnet-sdk-11.0 +4 | 11.0.100~rc.3.26522.148-0.11.el10_3 | RLSA-2026:98627 |
| Rocky Linux 10 | dotnet10.0 | 10.0.114-1.el10_2 | RLSA-2026:92438 |
| Rocky Linux 10 | dotnet8.0 | 8.0.133-1.el10_2 | RLSA-2026:92428 |
| Rocky Linux 10 | dotnet9.0 | 9.0.123-1.el10_2 | RLSA-2026:92430 |
| Rocky Linux 9 | dotnet10.0 | 10.0.114-1.el9_8 | RLSA-2026:92432 |
| Rocky Linux 9 | dotnet8.0 | 8.0.133-1.el9_8 | RLSA-2026:92492 |
| Rocky Linux 9 | dotnet9.0 | 9.0.123-1.el9_8 | RLSA-2026:92429 |
| Rocky Linux 8 | dotnet10.0 | 10.0.114-1.el8_10 | RLSA-2026:92431 |
| Rocky Linux 8 | dotnet11.0 | 11.0.100~rc.3.26522.148-0.12.el8_10 | RLSA-2026:92511 |
| Rocky Linux 8 | dotnet8.0 | 8.0.133-1.el8_10 | RLSA-2026:92420 |
| Rocky Linux 8 | dotnet9.0 | 9.0.123-1.el8_10 | RLSA-2026:92427 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | dotnet10-runtime | 10.0.14-r0 | — |
| Alpine v3.24 | dotnet8-runtime | 8.0.33-r0 | — |
| Alpine v3.24 | dotnet9-runtime | 9.0.22-r0 | — |
| Alpine v3.23 | dotnet8-runtime | 8.0.33-r0 | — |
| Alpine v3.23 | dotnet9-runtime | 9.0.22-r0 | — |
| Alpine v3.22 | dotnet8-runtime | 8.0.33-r0 | — |
| Alpine v3.22 | dotnet9-runtime | 9.0.22-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | dotnet +5 | 8.0.133-1.amzn2023.0.1 | ALAS2023-2026-3374, ALAS2023-2026-3367, ALAS2023-2026-3366 |
| Amazon Linux 2023 | dotnet-host +8 | 8.0.33-1.amzn2023.0.1 | ALAS2023-2026-3374, ALAS2023-2026-3367, ALAS2023-2026-3366 |
| Amazon Linux 2023 | dotnet-hostfxr-10.0 +7 | 10.0.14-1.amzn2023.0.1 | ALAS2023-2026-3366 |
| Amazon Linux 2023 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.amzn2023.0.1 | ALAS2023-2026-3374 |
| Amazon Linux 2023 | dotnet-sdk-10.0 +4 | 10.0.114-1.amzn2023.0.1 | ALAS2023-2026-3366 |
| Amazon Linux 2023 | dotnet-sdk-9.0 +4 | 9.0.123-1.amzn2023.0.1 | ALAS2023-2026-3374 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | dotnet-host +8 | 10.0.14-1.0.1.el10_2 | ELSA-2026-92438 |
| Oracle Linux 10 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.0.1.el10_2 | ELSA-2026-92428 |
| Oracle Linux 10 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.0.1.el10_2 | ELSA-2026-92430 |
| Oracle Linux 10 | dotnet-sdk-10.0 +4 | 10.0.114-1.0.1.el10_2 | ELSA-2026-92438 |
| Oracle Linux 10 | dotnet-sdk-8.0 +3 | 8.0.133-1.0.1.el10_2 | ELSA-2026-92428 |
| Oracle Linux 10 | dotnet-sdk-9.0 +5 | 9.0.123-1.0.1.el10_2 | ELSA-2026-92430 |
| Oracle Linux 9 | dotnet-host +8 | 10.0.14-1.0.1.el9_8 | ELSA-2026-92432 |
| Oracle Linux 9 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.0.1.el9_8 | ELSA-2026-92492 |
| Oracle Linux 9 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.0.1.el9_8 | ELSA-2026-92429 |
| Oracle Linux 9 | dotnet-sdk-10.0 +4 | 10.0.114-1.0.1.el9_8 | ELSA-2026-92432 |
| Oracle Linux 9 | dotnet-sdk-8.0 +3 | 8.0.133-1.0.1.el9_8 | ELSA-2026-92492 |
| Oracle Linux 9 | dotnet-sdk-9.0 +5 | 9.0.123-1.0.1.el9_8 | ELSA-2026-92429 |
| Oracle Linux 8 | dotnet +5 | 10.0.114-1.0.2.el8_10 | ELSA-2026-92431 |
| Oracle Linux 8 | dotnet-host +8 | 10.0.14-1.0.2.el8_10 | ELSA-2026-92431 |
| Oracle Linux 8 | dotnet-hostfxr-8.0 +7 | 8.0.33-1.0.1.el8_10 | ELSA-2026-92420 |
| Oracle Linux 8 | dotnet-hostfxr-9.0 +7 | 9.0.22-1.0.1.el8_10 | ELSA-2026-92427 |
| Oracle Linux 8 | dotnet-sdk-8.0 +3 | 8.0.133-1.0.1.el8_10 | ELSA-2026-92420 |
| Oracle Linux 8 | dotnet-sdk-9.0 +5 | 9.0.123-1.0.1.el8_10 | ELSA-2026-92427 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
Ghost-Bx1/DotNet-Tarball-CVE-2026-114148 ★ 1 · Oct 27, 2026
CVE-2026-114148 - .NET Linux Tarball Local Privilege Escalation PoC & Exploit
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- RHSA-2026:93456 Red Hat Security Advisory: .NET 8.0 security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:93457 Red Hat Security Advisory: .NET 8.0 security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:93455 Red Hat Security Advisory: .NET 8.0 security update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:92428 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:92420 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:92492 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 14, 2026
- RHSA-2026:92511 Red Hat Security Advisory: .NET 11.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:99170 Red Hat Security Advisory: .NET 11.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:98627 Red Hat Security Advisory: .NET 11.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:92432 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:92429 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:92430 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:92431 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:93458 Red Hat Security Advisory: .NET 9.0 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:93459 Red Hat Security Advisory: .NET 9.0 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:92427 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:92438 Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:91709 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RLSA-2026:98627 Important: .NET 11.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- WID-SEC-2026-4162 Microsoft .NET und ASP.NET: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Nov 11, 2026
- ELSA-2026-92431 Important: .NET 10.0 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 3, 2026
- ALAS2023-2026-3366 Important: dotnet10.0 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 2, 2026
- ALAS2023-2026-3367 Important: dotnet8.0 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 2, 2026
- ALAS2023-2026-3374 Important: dotnet9.0 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 2, 2026
- ELSA-2026-92432 Important: .NET 10.0 security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 2, 2026
- RLSA-2026:92432 Important: .NET 10.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- RLSA-2026:92492 Important: .NET 8.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- RLSA-2026:92429 Important: .NET 9.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- RLSA-2026:92430 Important: .NET 9.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- ALSA-2026:92430 Important: .NET 9.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 31, 2026
- ALSA-2026:92438 Important: .NET 10.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 31, 2026
- ALSA-2026:92428 Important: .NET 8.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 31, 2026
- ALSA-2026:92431 Important: .NET 10.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 31, 2026
- ALSA-2026:92420 Important: .NET 8.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 31, 2026
- ALSA-2026:92427 Important: .NET 9.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 31, 2026
- ALSA-2026:92511 Important: .NET 11.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 31, 2026
- USN-8958-1 dotnet8, dotnet10, dotnet11 vulnerabilities Ubuntu Security Notices (USN) · Oct 31, 2026
- RLSA-2026:92438 Important: .NET 10.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- RLSA-2026:92420 Important: .NET 8.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- RLSA-2026:92427 Important: .NET 9.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- RLSA-2026:92511 Important: .NET 11.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- RLSA-2026:92428 Important: .NET 8.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- RLSA-2026:92431 Important: .NET 10.0 security, bug fix, and enhancement update Rocky Linux Security Advisories · Oct 31, 2026
- ALSA-2026:92429 Important: .NET 9.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 30, 2026
- ALSA-2026:92432 Important: .NET 10.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 30, 2026
- ALSA-2026:92492 Important: .NET 8.0 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 30, 2026
- ELSA-2026-92492 Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Oct 30, 2026
- ELSA-2026-92420 Important: .NET 8.0 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Oct 30, 2026
- ELSA-2026-92430 Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Oct 30, 2026
- ELSA-2026-92427 Important: .NET 9.0 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Oct 30, 2026
References
- ASP.NET Core Elevation of Privilege Vulnerability vendor-advisory patch