CVE-2026-47300: CWE-303: Incorrect Implementation of Authentication Algorithm in Microsoft .NET 10.0

This Red Hat security advisory details an update to Red Hat Hardened Images RPMs specifically targeting dotnet8.0 components. The update addresses multiple security vulnerabilities identified by CVE identifiers such as CVE-2026-47304, CVE-2026-50646, CVE-2026-50649, and CVE-2026-50650. The affected packages include aspnetcore-runtime, dotnet-runtime, dotnet-sdk, and related targeting and template packs for both aarch64 and x86_64 architectures. The advisory confirms the availability of an official fix to remediate these issues. The vulnerabilities are associated with various CWEs including resource management, improper input validation, and code injection risks. No known exploits in the wild have been reported at this time.

The vulnerabilities affect the security posture of Red Hat Hardened Images RPMs for dotnet8.0, potentially exposing systems to risks related to the listed CVEs. The severity is rated high by Red Hat, indicating significant impact if exploited. However, there are no known active exploits in the wild currently. The issues could affect applications and services relying on these dotnet8.0 packages on supported architectures.

Red Hat has released an official fix for these vulnerabilities in the form of updated RPM packages for dotnet8.0 components. Users should apply the security update as provided by Red Hat to remediate the issues. Details and instructions for applying the update are available at https://images.redhat.com/. No additional mitigation steps are indicated by the vendor advisory.