{"schemaVersion":3,"id":"CVE-2026-26171","aliases":["UBUNTU-CVE-2026-26171","CGA-237j-4459-62h4","CGA-24r3-jwhv-w68m","CGA-29vw-g4xh-pgwm","CGA-2c3j-9r33-7j4j","CGA-2crc-fjpv-w549","CGA-2hqf-jq3r-xg36","CGA-2mpw-8wpv-9c4q","CGA-2rq7-6v3g-2c7r","CGA-2w57-h5pg-hx8v","CGA-2x7f-9v26-q873","CGA-2xxw-5wp8-8v6g","CGA-3697-gcxq-446h","CGA-3h7f-3m6m-frxf","CGA-426j-4fcm-663w","CGA-46hh-239r-hvmm","CGA-4822-v448-ph6p","CGA-4fw2-ffjq-4m72","CGA-4vwc-mp7m-5hqg","CGA-4xq7-35q5-qv8h","CGA-57rw-rxgf-2cmx","CGA-5ghj-56g7-5x5f","CGA-5vmc-qg67-c7qm","CGA-6367-fr8m-wjp9","CGA-6546-xprq-46p9","CGA-67jv-4669-vmwm","CGA-6xwm-j4h9-w965","CGA-73ww-7pr9-h66m","CGA-78jj-5542-phmm","CGA-7f5j-q32p-7pr9","CGA-823v-5442-4g34","CGA-83wr-5g85-w9pc","CGA-84g8-hq28-5668","CGA-866p-w989-hgqc","CGA-87gh-q7wq-q9j9","CGA-892m-gf5g-7fm9","CGA-8fc2-4f9r-5gqm","CGA-8g77-7358-p9wm","CGA-8jc2-xh7h-xr59","CGA-8p5x-4mjv-qq7h","CGA-8rv4-2jjq-cxcp","CGA-8v49-g5xc-8v7r","CGA-8vxf-gj7f-44p9","CGA-8w52-hx87-78xh","CGA-8xc6-frg3-q74g","CGA-9587-45vr-4vfr","CGA-95qc-772r-8hwf","CGA-96vc-54fp-4g3h","CGA-97g4-9524-4rxc","CGA-9g44-4953-h5rw","CGA-9h5r-hghx-c9q6","CGA-9vj7-4mmm-46mh","CGA-c24h-45pm-gj3f","CGA-c3g9-jh82-769q","CGA-c67m-4h4h-6qxf","CGA-c6mg-7pq2-q2wr","CGA-c9qx-6xxr-jh9v","CGA-cg9p-j6x9-r776","CGA-chh3-h679-wrvj","CGA-chmw-xqph-qp8m","CGA-cjfv-gjch-439h","CGA-cjg5-44h8-wqvm","CGA-cjjj-h3qv-9mqp","CGA-cmfw-552r-phrf","CGA-cwxm-h77c-6w6q","CGA-f2rc-h58g-ph38","CGA-f7cp-c9rp-rg9p","CGA-f8wp-cxq5-gm7r","CGA-fv28-p969-fch5","CGA-fxf2-qvwh-m3hp","CGA-g7wm-8hxj-c8mq","CGA-g8mq-v633-c5f9","CGA-g94r-fv86-phpj","CGA-g9gv-gmvh-64g7","CGA-gc9w-3p5m-7j7c","CGA-gq63-jp9v-j6xr","CGA-gqjc-xhrf-8vqm","CGA-gqqq-v7jj-7wfp","CGA-gvjx-g52p-5qrp","CGA-hggm-cv33-f9pg","CGA-hm5h-xw88-fc7x","CGA-hq2q-63fx-pcc6","CGA-hr9w-r742-h2vx","CGA-hrh7-5v38-67j8","CGA-jppx-g565-pxp3","CGA-jv8r-c3mr-9wxw","CGA-jxq2-868v-53wp","CGA-m696-5mfh-765h","CGA-m78j-56f3-g723","CGA-mpcp-m863-2jgq","CGA-mpcx-95mq-r877","CGA-mpmx-mw76-5476","CGA-mq5v-rrfc-qvhj","CGA-mvcw-84fc-34qj","CGA-p63p-7vfh-q9mh","CGA-p7w9-2qvp-fjfq","CGA-pfc3-27jw-v6qp","CGA-pqvr-jjxw-7rfq","CGA-prmc-r2fj-cv64","CGA-qcjm-c428-9f7m","CGA-qhfg-h2wm-mxh9","CGA-qjwq-6wp9-9ggc","CGA-r6gp-mh98-j7gw","CGA-r8c8-grh9-8q2c","CGA-r9rq-cwph-4qgw","CGA-rpg3-872m-rx9m","CGA-rrqp-h5p8-xh2g","CGA-rxcc-pqgm-83q6","CGA-rxcj-xvr3-m249","CGA-v34q-7w7r-3g5p","CGA-v5xh-953m-m36r","CGA-v6rw-7pxm-f72p","CGA-v77g-2xcj-v4vp","CGA-vj8x-7m5j-3f3c","CGA-vmjp-v3mg-vrpv","CGA-vwpp-qwvv-p65m","CGA-w34p-q8xq-cv5x","CGA-w5v4-8hgf-86r4","CGA-w6gx-8xwc-22c6","CGA-w99f-4c8h-4g98","CGA-wh56-ff48-rgcq","CGA-wj5q-rrm8-g4v5","CGA-wm2j-chw2-6g4h","CGA-wpx6-f2x6-ff7x","CGA-wqc6-v45f-23pg","CGA-wqjf-6mg5-7g9r","CGA-wrcx-687g-4gjr","CGA-ww8x-32c8-4m5w","CGA-xfq9-85xx-64cx","CGA-xg42-c4m5-824v","CGA-xvc5-mmq6-4r5m","GHSA-w3x6-4m5h-cxqf","BIT-dotnet-2026-26171","BIT-dotnet-sdk-2026-26171","BIT-powershell-2026-26171"],"status":"published","duplicateOf":null,"title":null,"description":"Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.","dates":{"published":"2026-04-14T16:58:37.655Z","modified":"2026-10-15T15:53:38.038Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Nuget","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02261,"percentile":0.82726,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.5080000000000001,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01753},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02261,"percentile":0.82726}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01753,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02261,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02261,"percentile":0.82726}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"},{"id":"CWE-611","name":"Improper Restriction of XML External Entity Reference","description":"The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/611.html"},{"id":"CWE-776","name":"Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","description":"The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/776.html"}],"affected":[{"vendor":"chainguard","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-10-sdk","purlType":"apk","versions":[{"text":"< 10.0.106-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.106-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-8-sdk","purlType":"apk","versions":[{"text":"< 8.0.126-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.126-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-9-sdk","purlType":"apk","versions":[{"text":"< 9.0.116-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.116-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"< 8.0.127-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.127-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"< 9.0.116-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 9.0.117-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.116-r0 | < 9.0.117-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.1","name":"dotnet-sdk-10.0.1","label":"dotnet-sdk-10.0.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.1","purlType":"apk","versions":[{"text":"< 10.0.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.107-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"< 10.0.203-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.203-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.203-r1 | < 10.0.203-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"< 10.0.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.107-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"powershell","name":"powershell","label":"powershell","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/powershell","purlType":"apk","versions":[{"text":"< 7.6.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/promitor","purlType":"apk","versions":[{"text":"< 2.15.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-10-sdk","name":"dotnet-10-sdk","label":"dotnet-10-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-10-sdk","purlType":"apk","versions":[{"text":"< 10.0.106-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.106-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-8-sdk","name":"dotnet-8-sdk","label":"dotnet-8-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-8-sdk","purlType":"apk","versions":[{"text":"< 8.0.126-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.126-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-9-sdk","name":"dotnet-9-sdk","label":"dotnet-9-sdk","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-9-sdk","purlType":"apk","versions":[{"text":"< 9.0.116-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.116-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-8","name":"dotnet-bootstrap-8","label":"dotnet-bootstrap-8","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-8","purlType":"apk","versions":[{"text":"< 8.0.127-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.127-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-bootstrap-9","name":"dotnet-bootstrap-9","label":"dotnet-bootstrap-9","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-bootstrap-9","purlType":"apk","versions":[{"text":"< 9.0.116-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 9.0.117-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.116-r0 | < 9.0.117-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.1","name":"dotnet-sdk-10.0.1","label":"dotnet-sdk-10.0.1","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.1","purlType":"apk","versions":[{"text":"< 10.0.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.107-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-10.0.2","name":"dotnet-sdk-10.0.2","label":"dotnet-sdk-10.0.2","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-10.0.2","purlType":"apk","versions":[{"text":"< 10.0.203-r1","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.203-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.203-r1 | < 10.0.203-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dotnet-sdk-stage0-10","name":"dotnet-sdk-stage0-10","label":"dotnet-sdk-stage0-10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dotnet-sdk-stage0-10","purlType":"apk","versions":[{"text":"< 10.0.107-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.107-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"powershell","name":"powershell","label":"powershell","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/powershell","purlType":"apk","versions":[{"text":"< 7.6.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.6.1-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"promitor","name":"promitor","label":"promitor","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/promitor","purlType":"apk","versions":[{"text":"< 2.15.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-r2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet10","name":"dotnet10","label":"dotnet10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet10","purlType":"deb","versions":[{"text":"< 10.0.106-10.0.6-0ubuntu1~24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.106-10.0.6-0ubuntu1~25.10.1","noFixRecorded":false,"fixedIn":null},{"text":"< 10.0.107-10.0.7-0ubuntu1~26.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.0.106-10.0.6-0ubuntu1~24.04.1 | < 10.0.106-10.0.6-0ubuntu1~25.10.1 | < 10.0.107-10.0.7-0ubuntu1~26.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet6","name":"dotnet6","label":"dotnet6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet7","name":"dotnet7","label":"dotnet7","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet7","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet8","name":"dotnet8","label":"dotnet8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet8","purlType":"deb","versions":[{"text":"< 8.0.126-8.0.26-0ubuntu1~22.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.126-8.0.26-0ubuntu1~24.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 8.0.126-8.0.26-0ubuntu1~25.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.126-8.0.26-0ubuntu1~22.04.1 | < 8.0.126-8.0.26-0ubuntu1~24.04.1 | < 8.0.126-8.0.26-0ubuntu1~25.10.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"dotnet9","name":"dotnet9","label":"dotnet9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/dotnet9","purlType":"deb","versions":[{"text":"< 9.0.116-9.0.15-0ubuntu1~25.10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.116-9.0.15-0ubuntu1~25.10.1","eol":null,"hubHref":null},{"vendor":"microsoft","product":".net","name":".net","label":".net","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.26","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.6 | ≥ 8.0.0, < 8.0.26 | ≥ 9.0.0, < 9.0.15","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"dotnet","label":"Microsoft .NET","category":"framework"}},"hubHref":"/vendor/microsoft/net"},{"vendor":"microsoft","product":".net 10.0","name":".NET 10.0","label":".net 10.0","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.0.0, < 10.0.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.6","eol":null,"hubHref":"/vendor/microsoft/net_100"},{"vendor":"microsoft","product":".net 8.0","name":".NET 8.0","label":".net 8.0","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 8.0.0, < 8.0.26","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 8.0.0, < 8.0.26","eol":null,"hubHref":"/vendor/microsoft/net_80"},{"vendor":"microsoft","product":".net 9.0","name":".NET 9.0","label":".net 9.0","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.0.0, < 9.0.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.0.0, < 9.0.15","eol":null,"hubHref":"/vendor/microsoft/net_90"},{"vendor":"microsoft","product":"powershell","name":"powershell","label":"powershell","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.5, < 7.5.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.6, < 7.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.5, < 7.5.6 | ≥ 7.6, < 7.6.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"powershell","label":"Microsoft PowerShell","category":"lang"}},"hubHref":"/vendor/microsoft/powershell"},{"vendor":"microsoft","product":"powershell 7.5","name":"PowerShell 7.5","label":"powershell 7.5","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.5.0, < 7.5.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.5.0, < 7.5.6","eol":null,"hubHref":"/vendor/microsoft/powershell_75"},{"vendor":"microsoft","product":"powershell 7.6","name":"PowerShell 7.6","label":"powershell 7.6","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.6.0, < 7.6.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.6.0, < 7.6.1","eol":null,"hubHref":"/vendor/microsoft/powershell_76"},{"vendor":"NuGet","product":"System.Security.Cryptography.Xml","name":"System.Security.Cryptography.Xml","label":"System.Security.Cryptography.Xml","ecosystem":"NuGet","cpePart":null,"purl":"pkg:nuget/System.Security.Cryptography.Xml","purlType":"nuget","versions":[{"text":"≥ 10.0.0, < 10.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.0.0, < 9.0.15","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0, < 8.0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.0.0, < 10.0.6 | ≥ 9.0.0, < 9.0.15 | ≥ 8.0.0, < 8.0.3","eol":null,"hubHref":null}],"affectedCount":33,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171","label":"msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171","hostname":"msrc.microsoft.com","tags":["Vendor Advisory","Patch","REPORT","WEB"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-26171","label":"access.redhat.com/security/cve/CVE-2026-26171","hostname":"access.redhat.com","tags":["VDB Entry","X Refsource REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457739","label":"bugzilla.redhat.com/show_bug.cgi?id=2457739","hostname":"bugzilla.redhat.com","tags":["Issue Tracking","X Refsource REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26171.json","label":"security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26171.json","hostname":"security.access.redhat.com","tags":["X Sadp Csaf Vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13281","label":"access.redhat.com/errata/RHSA-2026:13281","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13280","label":"access.redhat.com/errata/RHSA-2026:13280","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8467","label":"access.redhat.com/errata/RHSA-2026:8467","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8470","label":"access.redhat.com/errata/RHSA-2026:8470","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8472","label":"access.redhat.com/errata/RHSA-2026:8472","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8473","label":"access.redhat.com/errata/RHSA-2026:8473","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8468","label":"access.redhat.com/errata/RHSA-2026:8468","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8475","label":"access.redhat.com/errata/RHSA-2026:8475","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13693","label":"access.redhat.com/errata/RHSA-2026:13693","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13283","label":"access.redhat.com/errata/RHSA-2026:13283","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13282","label":"access.redhat.com/errata/RHSA-2026:13282","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8471","label":"access.redhat.com/errata/RHSA-2026:8471","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8469","label":"access.redhat.com/errata/RHSA-2026:8469","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8474","label":"access.redhat.com/errata/RHSA-2026:8474","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9077","label":"access.redhat.com/errata/RHSA-2026:9077","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9080","label":"access.redhat.com/errata/RHSA-2026:9080","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9205","label":"access.redhat.com/errata/RHSA-2026:9205","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"https://ubuntu.com/security/CVE-2026-26171","label":"ubuntu.com/security/CVE-2026-26171","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-26171","label":"www.cve.org/CVERecord?id=CVE-2026-26171","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-april-2026-servicing-updates","label":"devblogs.microsoft.com/dotnet/dotnet-and-dotnet-framework-april-2026-servicing-updates","hostname":"devblogs.microsoft.com","tags":["REPORT"]},{"url":"https://github.com/dotnet/announcements/issues/389","label":"github.com/dotnet/announcements/issues/389","hostname":"github.com","tags":["REPORT","WEB"]},{"url":"https://ubuntu.com/security/notices/USN-8176-1","label":"ubuntu.com/security/notices/USN-8176-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8216-1","label":"ubuntu.com/security/notices/USN-8216-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-w3x6-4m5h-cxqf","label":"github.com/dotnet/runtime/security/advisories/GHSA-w3x6-4m5h-cxqf","hostname":"github.com","tags":["WEB"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26171","label":"nvd.nist.gov/vuln/detail/CVE-2026-26171","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/dotnet/runtime","label":"github.com/dotnet/runtime","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:13280","RHSA-2026:13281","RHSA-2026:13282","RHSA-2026:13283","RHSA-2026:13693","RHSA-2026:8467","RHSA-2026:8468","RHSA-2026:8469","RHSA-2026:8470","RHSA-2026:8471","RHSA-2026:8472","RHSA-2026:8473","RHSA-2026:8474","RHSA-2026:8475","RHSA-2026:9077","RHSA-2026:9080","RHSA-2026:9205"],"duplicates":[],"related":["CGA-R6XQ-884F-3MGW","USN-8176-1","USN-8216-1"]},"timeline":[{"kind":"published","date":"2026-04-14T16:58:37.655Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-15T15:53:38.038Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T01:53:38.542Z","stale":false,"partial":false}}