https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:30:02.250343+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:67524 ALSA-2026:67524 — Moderate: .NET 8.0 security, bug fix, and enhancement update 2026-10-02T17:30:02.893956+00:00

Affected: AlmaLinux:9: aspnetcore-runtime-8.0, AlmaLinux:9: aspnetcore-runtime-dbg-8.0, AlmaLinux:9: aspnetcore-targeting-pack-8.0, AlmaLinux:9: dotnet-apphost-pack-8.0, AlmaLinux:9: dotnet-hostfxr-8.0, AlmaLinux:9: dotnet-runtime-8.0, AlmaLinux:9: dotnet-runtime-dbg-8.0, AlmaLinux:9: dotnet-sdk-8.0, AlmaLinux:9: dotnet-sdk-8.0-source-built-artifacts, AlmaLinux:9: dotnet-sdk-dbg-8.0 and 2 more

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131 Runtime version: 8.0.31

Security Fix(es):

* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

* Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [almalinux-9.8.z] (JIRA:AlmaLinux-252247)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-58649 BELL-CVE-2026-58649 2026-10-02T17:30:02.894083+00:00

Affected: Alpaquita:25: dotnet8-runtime, Alpaquita:stream: dotnet8-runtime

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1146 certfr-2026-avi-1146 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant… 2026-10-02T17:30:02.894144+00:00 certfr-2026-avi-1146 https://cve.radiocsirt.org/vuln/euvd-2026-381764 EUVD-2026-381764 2026-10-02T17:30:02.894194+00:00 EUVD-2026-381764 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58649 fkie_cve-2026-58649 2026-10-02T17:30:02.894218+00:00

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

 https://cve.radiocsirt.org/vuln/ghsa-44g5-m8vm-448v GHSA-44g5-m8vm-448v 2026-10-02T17:30:02.894260+00:00

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-58649 msrc_CVE-2026-58649 — .NET Information Disclosure Vulnerability 2026-10-02T17:30:02.894290+00:00 msrc_CVE-2026-58649 https://cve.radiocsirt.org/vuln/ncsc-2026-0351 NCSC-2026-0351 — Kwetsbaarheden verholpen in Microsoft Developer Tools 2026-10-02T17:30:02.894323+00:00 NCSC-2026-0351 https://cve.radiocsirt.org/vuln/rhsa-2026:66863 RHSA-2026:66863 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T17:30:02.894372+00:00

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability

 https://cve.radiocsirt.org/vuln/rhsa-2026:67524 RHSA-2026:67524 — Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update 2026-10-02T17:30:02.894412+00:00

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability

 https://cve.radiocsirt.org/vuln/rlsa-2026:67524 RLSA-2026:67524 — Moderate: .NET 8.0 security, bug fix, and enhancement update 2026-10-02T17:30:02.894446+00:00

Affected: Rocky Linux:9: dotnet8.0

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 8.0.131 Runtime version: 8.0.31

Security Fix(es):

* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

Bug Fix(es) and Enhancement(s):

* Update .NET 8.0 to SDK 8.0.131 and Runtime 8.0.31 [rhel-9.8.z] (JIRA:Rocky Linux-252247)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58649 UBUNTU-CVE-2026-58649 2026-10-02T17:30:02.894506+00:00

Affected: Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7, Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet10, Ubuntu:24.04:LTS: dotnet8, Ubuntu:26.04:LTS: dotnet10

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3242 WID-SEC-W-2026-3242 — Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2026-10-02T17:30:02.894560+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Entwicklerwerkzeugen ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen, sowie Informationen zu manipulieren oder offenzulegen.