Threats Tagged 'cve-2026-62901'

Red Hat has released a security advisory addressing multiple vulnerabilities in the .NET 8.0 platform on Red Hat Enterprise Linux 8. The update includes fixes for security feature bypass, information disclosure, denial of service, and elevation of privilege vulnerabilities. These issues affect various .NET runtime and SDK components across multiple architectures. The advisory provides an official fix through updated RPM packages.

Multiple security vulnerabilities affecting .NET 10.0 on Red Hat Enterprise Linux and Red Hat Hardened Images have been addressed in updated SDK and runtime packages. The vulnerabilities include a security feature bypass, information disclosure, denial of service, and elevation of privilege. Red Hat has released updated packages (SDK 10.0.111 and Runtime 10.0.11) that fix these issues. The update is rated as having a high security impact. Users of affected Red Hat products should apply the updates provided by Red Hat to mitigate these vulnerabilities.

Red Hat has released an important security update for .NET 8.0 on Red Hat Enterprise Linux 10, addressing multiple vulnerabilities including security feature bypass, information disclosure, denial of service, and elevation of privilege. The update upgrades the .NET SDK to version 8.0.130 and runtime to 8.0.30. These vulnerabilities affect the .NET Core runtime and libraries used for cross-platform application development. The advisory covers various architectures including x86_64, s390x, ppc64le, and aarch64. Users are advised to apply the update to mitigate these security issues.

CVE-2026-62901 is a high-severity vulnerability in Microsoft .NET 10.0 involving unchecked input for a loop condition. This flaw allows an unauthenticated attacker to cause a denial of service (DoS) over a network by exploiting the System.Net.WebSockets component. The vulnerability impacts service availability and reliability but does not affect confidentiality or integrity. An official fix is available and has been released by Red Hat for affected products. No known exploits are currently reported in the wild.

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.