CVE-2026-26171Published

.NET Denial of Service Vulnerability

cve-program · CVE-2026-26171

Published

.NET 10.0

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": ".NET 10.0",
                    "versions": [
                        {
                            "version": "10.0.0",
                            "lessThan": "10.0.6",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

.NET 8.0

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": ".NET 8.0",
                    "versions": [
                        {
                            "version": "8.0.0",
                            "lessThan": "8.0.26",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

.NET 9.0

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": ".NET 9.0",
                    "versions": [
                        {
                            "version": "9.0.0",
                            "lessThan": "9.0.15",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

PowerShell 7.5

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "PowerShell 7.5",
                    "versions": [
                        {
                            "version": "7.5.0",
                            "lessThan": "7.5.6",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

PowerShell 7.6

Vendor product

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "Microsoft",
                    "product": "PowerShell 7.6",
                    "versions": [
                        {
                            "version": "7.6.0",
                            "lessThan": "7.6.1",
                            "versionType": "custom",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2026-22404

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Apr 14, 2026, 4:58:37 PM

dateUpdated: Oct 15, 2026, 3:53:38 PM

19 related source bulletins · separate from aliases

msrc_CVE-2026-26171: .NET Denial of Service Vulnerability

CVE-2026-26171

RHSA-2026:13281: Red Hat Security Advisory: .NET 8.0 security update