Red Hat Security Advisory

RHSA-2026:66863

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-09-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images dotnet-sdk-10.0-10.0.112-1.hum1@aarch64, dotnet-sdk-10.0-10.0.112-1.hum1@x86_64, dotnet-sdk-10.0-source-built-artifacts-10.0.112-1.hum1@aarch64 +8

TI-2026-49047 CVE-2026-69806 · GHSA-fg32-9f4f-8w3f

LOW 34

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00824 Published 2026-09-08 Fixed in 10.0.12, 11.0 RC1 +3 CWE-200

TI-2026-42214 CVE-2026-58649 · GHSA-44g5-m8vm-448v

LOW 29

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00359 Published 2026-09-08 Fixed in 10.0.111, 10.0.400 +7 CWE-346

TI-2026-48640 CVE-2026-69304 · GHSA-8cp2-47hg-mfgh

LOW 28

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00855 Published 2026-09-08 Fixed in 10.0.12, 8.0.31 +5 CWE-409