https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:32:31.144855+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:67528 ALSA-2026:67528 — Important: .NET 9.0 security, bug fix, and enhancement update 2026-10-02T15:32:31.164647+00:00

Affected: AlmaLinux:10: aspnetcore-runtime-9.0, AlmaLinux:10: aspnetcore-runtime-dbg-9.0, AlmaLinux:10: aspnetcore-targeting-pack-9.0, AlmaLinux:10: dotnet-apphost-pack-9.0, AlmaLinux:10: dotnet-hostfxr-9.0, AlmaLinux:10: dotnet-runtime-9.0, AlmaLinux:10: dotnet-runtime-dbg-9.0, AlmaLinux:10: dotnet-sdk-9.0, AlmaLinux:10: dotnet-sdk-9.0-source-built-artifacts, AlmaLinux:10: dotnet-sdk-aot-9.0 and 4 more

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121 Runtime version: 9.0.20

Security Fix(es):

* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

* Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [almalinux-10.2.z] (JIRA:AlmaLinux-252279)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bit-dotnet-2026-69806 BIT-dotnet-2026-69806 — .NET Elevation of Privilege Vulnerability 2026-10-02T15:32:31.164738+00:00

Affected: Bitnami: dotnet

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1146 certfr-2026-avi-1146 — De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant… 2026-10-02T15:32:31.164763+00:00 certfr-2026-avi-1146 https://cve.radiocsirt.org/vuln/euvd-2026-381960 EUVD-2026-381960 2026-10-02T15:32:31.164781+00:00 EUVD-2026-381960 https://cve.radiocsirt.org/vuln/fkie_cve-2026-69806 fkie_cve-2026-69806 2026-10-02T15:32:31.164793+00:00

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/ghsa-fg32-9f4f-8w3f GHSA-fg32-9f4f-8w3f 2026-10-02T15:32:31.164813+00:00

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-69806 msrc_CVE-2026-69806 — .NET Elevation of Privilege Vulnerability 2026-10-02T15:32:31.164826+00:00 msrc_CVE-2026-69806 https://cve.radiocsirt.org/vuln/rhsa-2026:66863 RHSA-2026:66863 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-02T15:32:31.164841+00:00

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability

 https://cve.radiocsirt.org/vuln/rhsa-2026:67528 RHSA-2026:67528 — Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update 2026-10-02T15:32:31.164858+00:00

dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability

 https://cve.radiocsirt.org/vuln/rlsa-2026:67528 RLSA-2026:67528 — Important: .NET 9.0 security, bug fix, and enhancement update 2026-10-02T15:32:31.164874+00:00

Affected: Rocky Linux:10: dotnet9.0

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

SDK version: 9.0.121 Runtime version: 9.0.20

Security Fix(es):

* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)

* dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)

Bug Fix(es) and Enhancement(s):

* Update .NET 9.0 to SDK 9.0.121 and Runtime 9.0.20 [rhel-10.2.z] (JIRA:Rocky Linux-252279)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-69806 UBUNTU-CVE-2026-69806 2026-10-02T15:32:31.164902+00:00

Affected: Ubuntu:22.04:LTS: dotnet6, Ubuntu:22.04:LTS: dotnet7, Ubuntu:24.04:LTS: dotnet10, Ubuntu:26.04:LTS: dotnet10

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3242 WID-SEC-W-2026-3242 — Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen ermöglichen Privilegieneskalation 2026-10-02T15:32:31.164923+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Microsoft Entwicklerwerkzeugen ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen, sowie Informationen zu manipulieren oder offenzulegen.