Feed/CVE-2026-50659
CVE-2026-50659MEDIUMCVSS 6.5

CVE-2026-50659

Published Jul 14, 2026·Updated Jul 22, 2026

NVD Description

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

Affected Packages (12)

Microsoft.NetCore.App.Runtime.win-x64NUGET
From 9.0.0
Fixed in = 9.0.17
Microsoft.NetCore.App.Runtime.win-arm64NUGET
From 9.0.0
Fixed in = 9.0.17
Microsoft.NetCore.App.Runtime.win-x86NUGET
From 9.0.0
Fixed in = 9.0.17
Microsoft.NetCore.App.Runtime.linux-musl-arm64NUGET
From 8.0.0
Fixed in = 8.0.28
Microsoft.NetCore.App.Runtime.osx-x64NUGET
From 9.0.0
Fixed in = 9.0.17
Microsoft.NetCore.App.Runtime.linux-x64NUGET
From 9.0.0
Fixed in = 9.0.17
Microsoft.NetCore.App.Runtime.linux-musl-armNUGET
From 8.0.0
Fixed in = 8.0.28
Microsoft.NetCore.App.Runtime.linux-arm64NUGET
From 8.0.0
Fixed in = 8.0.28
Microsoft.NetCore.App.Runtime.osx-arm64NUGET
From 9.0.0
Fixed in = 9.0.17
Microsoft.NetCore.App.Runtime.linux-armNUGET
From 8.0.0
Fixed in = 8.0.28
Microsoft.NetCore.App.Runtime.win-armNUGET
From 9.0.0
Fixed in = 9.0.17
Microsoft.NetCore.App.Runtime.linux-musl-x64NUGET
From 9.0.0
Fixed in = 9.0.17

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free