Red Hat Security Advisory

RHSA-2026:68676

.NET 10.0 security, bug fix, and enhancement update

Released 2026-09-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) aspnetcore-runtime-10.0-10.0.12-1.el8_10, aspnetcore-runtime-dbg-10.0-10.0.12-1.el8_10, aspnetcore-targeting-pack-10.0-10.0.12-1.el8_10 +12
Red Hat Enterprise Linux CRB (v. 8) dotnet-sdk-10.0-source-built-artifacts-10.0.112-1.el8_10

TI-2026-49047 CVE-2026-69806 · GHSA-fg32-9f4f-8w3f

LOW 34

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00824 Published 2026-09-08 Fixed in 10.0.12, 11.0 RC1 +3 CWE-200

TI-2026-42214 CVE-2026-58649 · GHSA-44g5-m8vm-448v

LOW 29

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00359 Published 2026-09-08 Fixed in 10.0.111, 10.0.400 +7 CWE-346