Red Hat Security Advisory

RHSA-2026:93459

.NET 9.0 security update

Released 2026-11-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder EUS (v.9.6) dotnet-sdk-9.0-source-built-artifacts-9.0.123-1.el9_6
Red Hat Enterprise Linux AppStream EUS (v.9.6) aspnetcore-runtime-9.0-9.0.22-1.el9_6, aspnetcore-runtime-dbg-9.0-9.0.22-1.el9_6, aspnetcore-targeting-pack-9.0-9.0.22-1.el9_6 +12

TI-2026-82582 CVE-2026-114148

LOW 36

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00355 Published 2026-10-29 Partial fix · 10.0.403, 11.0.100-rc.3 +4 CWE-276