Red Hat issued a security advisory for .NET 10.0 on RHEL 10 addressing two vulnerabilities: CVE-2026-58649, an information disclosure vulnerability affecting .NET 8.0, 9.0, and 10.0; and CVE-2026-69806, an elevation of privilege vulnerability affecting .NET 9.0 and 10.0. The update upgrades the SDK to 10.0.112 and runtime to 10.0.12, resolving these issues. The advisory references Red Hat Enterprise Linux 10 and its extended update support versions across multiple architectures. The vendor rates the security impact as important and provides official patches. No CVSS score is included in the advisory.

The vulnerabilities could allow unauthorized information disclosure and elevation of privilege within affected .NET environments on Red Hat Enterprise Linux 10. This could potentially lead to unauthorized access or privilege escalation if exploited. Red Hat classifies the impact as important, indicating a significant security risk requiring timely remediation.

Red Hat has released official patches updating .NET to SDK version 10.0.112 and runtime version 10.0.12 for RHEL 10. Users should apply these updates as detailed in the Red Hat advisory (https://access.redhat.com/articles/11258) to remediate the vulnerabilities. No additional mitigation steps are indicated beyond applying the official update.