Priority LOW 36
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
RHSA-2026:93458
.NET 9.0 security update
Released 2026-11-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) aspnetcore-runtime-9.0-9.0.22-1.el10_0, aspnetcore-runtime-dbg-9.0-9.0.22-1.el10_0, aspnetcore-targeting-pack-9.0-9.0.22-1.el10_0 +12
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) dotnet-sdk-9.0-source-built-artifacts-9.0.123-1.el10_0