{"id":"EUVD-2026-22404","revision":"1f9092cb0cd2460aa05260db4dfab8b5","records":[{"revision":"1f9092cb0cd2460aa05260db4dfab8b5","observedAt":"2026-10-28T02:53:37.375+00:00","statement":{"source":"euvd","id":"EUVD-2026-22404","aliases":["CVE-2026-26171"],"title":"Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.","description":"Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","score":7.5,"severity":null}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-22404","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 14, 2026, 4:58:37 PM","dateUpdated":"Oct 15, 2026, 3:53:38 PM"},"relatedAdvisories":[{"id":"msrc_CVE-2026-26171","title":".NET Denial of Service Vulnerability","vulnerabilityIds":["CVE-2026-26171"]},{"id":"RHSA-2026:13281","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8473","title":"security update for dotnet10.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:13282","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8475","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8474","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8470","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:9077","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-26131","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:9205","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-26646","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8472","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:13693","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:9080","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-26646","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8467","title":"security update for dotnet10.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:13283","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8469","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:13280","title":"Red Hat Security Advisory: .NET 9.0 security update","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"NCSC-2026-0114","title":"Kwetsbaarheden verholpen in Microsoft Developer tools","vulnerabilityIds":["CVE-2026-23653","CVE-2026-23666","CVE-2026-26143","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-32226","CVE-2026-33116"]},{"id":"RHSA-2026:8471","title":"security update for dotnet10.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8468","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-22404","identifiers":["EUVD-2026-22404","CVE-2026-26171"]},"retained":false,"historicalAffected":[]}],"coverage":[]}