{"id":"EUVD-2026-22562","revision":"f16c850a9a374b9aa3b4bc5bca37589a","records":[{"revision":"f16c850a9a374b9aa3b4bc5bca37589a","observedAt":"2026-10-30T04:51:51.429+00:00","statement":{"source":"euvd","id":"EUVD-2026-22562","aliases":["CVE-2026-32178","GHSA-vmwf-m9c5-3jvc"],"title":"Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.","description":"Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C","score":7.5,"severity":null}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-22562","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 14, 2026, 4:57:31 PM","dateUpdated":"Oct 15, 2026, 3:52:47 PM"},"relatedAdvisories":[{"id":"RHSA-2026:13280","title":"Red Hat Security Advisory: .NET 9.0 security update","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"msrc_CVE-2026-32178","title":".NET Spoofing Vulnerability","vulnerabilityIds":["CVE-2026-32178"]},{"id":"RHSA-2026:13282","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8468","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:13283","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:9077","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-26131","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8475","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8474","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"NCSC-2026-0114","title":"Kwetsbaarheden verholpen in Microsoft Developer tools","vulnerabilityIds":["CVE-2026-23653","CVE-2026-23666","CVE-2026-26143","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-32226","CVE-2026-33116"]},{"id":"RHSA-2026:8469","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:9205","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-26646","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:13693","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8473","title":"security update for dotnet10.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:9080","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2025-26646","CVE-2025-55247","CVE-2025-55248","CVE-2025-55315","CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8470","title":"security update for dotnet8.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8471","title":"security update for dotnet10.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8467","title":"security update for dotnet10.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:8472","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]},{"id":"RHSA-2026:13281","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-26171","CVE-2026-32178","CVE-2026-32203","CVE-2026-33116"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-22562","identifiers":["EUVD-2026-22562","CVE-2026-32178","GHSA-vmwf-m9c5-3jvc"]},"retained":false,"historicalAffected":[]}],"coverage":[]}