[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-50526":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":480,"aliases":481,"duplicate_of":9,"upstream":483,"downstream":484,"duplicates":491,"related":492,"reserved_at":9,"published_at":493,"modified_at":494,"state":495,"summary":496,"references_raw":502,"kevs":533,"epss":9,"epss_history":534,"metrics":535,"affected":544},"CVE-2026-50526","Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.",null,[11,195],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","weakness","Draft","Base","Medium",[20,101,162,191],{"id":21,"name":22,"techniques":23},"CAPEC-132","Symlink Attack",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1547.009","Shortcut Modification",[28,31],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,44,48,52,57,62,67,72,77,81,85,89,93,97],{"id":36,"name":37,"tactic":38},"D3-FA","File Analysis",{"name":39},"Detect",{"id":41,"name":42,"tactic":43},"D3-FIM","File Integrity Monitoring",{"name":39},{"id":45,"name":46,"tactic":47},"D3-DA","Dynamic Analysis",{"name":39},{"id":49,"name":50,"tactic":51},"D3-EFA","Emulated File Analysis",{"name":39},{"id":53,"name":54,"tactic":55},"D3-FEV","File Eviction",{"name":56},"Evict",{"id":58,"name":59,"tactic":60},"D3-DF","Decoy File",{"name":61},"Deceive",{"id":63,"name":64,"tactic":65},"D3-FE","File Encryption",{"name":66},"Harden",{"id":68,"name":69,"tactic":70},"D3-RF","Restore File",{"name":71},"Restore",{"id":73,"name":74,"tactic":75},"D3-CF","Content Filtering",{"name":76},"Isolate",{"id":78,"name":79,"tactic":80},"D3-LFP","Local File Permissions",{"name":76},{"id":82,"name":83,"tactic":84},"D3-RFAM","Remote File Access Mediation",{"name":76},{"id":86,"name":87,"tactic":88},"D3-CQ","Content Quarantine",{"name":76},{"id":90,"name":91,"tactic":92},"D3-CM","Content Modification",{"name":76},{"id":94,"name":95,"tactic":96},"D3-EAL","Executable Allowlisting",{"name":76},{"id":98,"name":99,"tactic":100},"D3-EDL","Executable Denylisting",{"name":76},{"id":102,"name":103,"techniques":104},"CAPEC-17","Using Malicious Files",[105,142],{"id":106,"name":107,"tactics":108,"countermeasures":120},"T1574.005","Executable Installer File Permissions Weakness",[109,110,111,114,117],{"id":29,"name":30},{"id":32,"name":33},{"id":112,"name":113},"TA0030","Defense Evasion",{"id":115,"name":116},"TA0005","Stealth",{"id":118,"name":119},"TA0104","Execution",[121,126,130,134,138],{"id":122,"name":123,"tactic":124},"D3-SWI","Software Inventory",{"name":125},"Model",{"id":127,"name":128,"tactic":129},"D3-AVE","Asset Vulnerability Enumeration",{"name":125},{"id":131,"name":132,"tactic":133},"D3-SBV","Service Binary Verification",{"name":39},{"id":135,"name":136,"tactic":137},"D3-SU","Software Update",{"name":66},{"id":139,"name":140,"tactic":141},"D3-RS","Restore Software",{"name":71},{"id":143,"name":144,"tactics":145,"countermeasures":151},"T1574.010","Services File Permissions Weakness",[146,147,148,149,150],{"id":29,"name":30},{"id":32,"name":33},{"id":112,"name":113},{"id":115,"name":116},{"id":118,"name":119},[152,154,156,158,160],{"id":122,"name":123,"tactic":153},{"name":125},{"id":127,"name":128,"tactic":155},{"name":125},{"id":131,"name":132,"tactic":157},{"name":39},{"id":135,"name":136,"tactic":159},{"name":66},{"id":139,"name":140,"tactic":161},{"name":71},{"id":163,"name":164,"techniques":165},"CAPEC-35","Leverage Executable Code in Non-Executable Files",[166,173,180],{"id":167,"name":168,"tactics":169,"countermeasures":172},"T1027.006","HTML Smuggling",[170,171],{"id":112,"name":113},{"id":115,"name":116},[],{"id":174,"name":175,"tactics":176,"countermeasures":179},"T1027.009","Embedded Payloads",[177,178],{"id":112,"name":113},{"id":115,"name":116},[],{"id":181,"name":182,"tactics":183,"countermeasures":186},"T1564.009","Resource Forking",[184,185],{"id":112,"name":113},{"id":115,"name":116},[187],{"id":188,"name":189,"tactic":190},"D3-FFV","File Format Verification",{"name":76},{"id":192,"name":193,"techniques":194},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"_key":196,"id":196,"name":197,"description":198,"type":15,"status":16,"abstraction":199,"likelihood_of_exploit":9,"capec":200},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","Class",[201,205,256,268,288,292,296,300,304,308,312,476],{"id":202,"name":203,"techniques":204},"CAPEC-111","JSON Hijacking (aka JavaScript Hijacking)",[],{"id":206,"name":207,"techniques":208},"CAPEC-141","Cache Poisoning",[209],{"id":210,"name":211,"tactics":212,"countermeasures":219},"T1557.002","ARP Cache Poisoning",[213,216],{"id":214,"name":215},"TA0031","Credential Access",{"id":217,"name":218},"TA0100","Collection",[220,224,228,232,236,240,244,248,252],{"id":221,"name":222,"tactic":223},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":39},{"id":225,"name":226,"tactic":227},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":39},{"id":229,"name":230,"tactic":231},"D3-CSPP","Client-server Payload Profiling",{"name":39},{"id":233,"name":234,"tactic":235},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":39},{"id":237,"name":238,"tactic":239},"D3-NTSA","Network Traffic Signature Analysis",{"name":39},{"id":241,"name":242,"tactic":243},"D3-APCA","Application Protocol Command Analysis",{"name":39},{"id":245,"name":246,"tactic":247},"D3-NTCD","Network Traffic Community Deviation",{"name":39},{"id":249,"name":250,"tactic":251},"D3-RTSD","Remote Terminal Session Detection",{"name":39},{"id":253,"name":254,"tactic":255},"D3-NTF","Network Traffic Filtering",{"name":76},{"id":257,"name":258,"techniques":259},"CAPEC-142","DNS Cache Poisoning",[260],{"id":261,"name":262,"tactics":263,"countermeasures":267},"T1584.002","DNS Server",[264],{"id":265,"name":266},"TA0042","Resource Development",[],{"id":269,"name":270,"techniques":271},"CAPEC-148","Content Spoofing",[272],{"id":273,"name":274,"tactics":275,"countermeasures":279},"T1491","Defacement",[276],{"id":277,"name":278},"TA0105","Impact",[280,284],{"id":281,"name":282,"tactic":283},"D3-DNR","Decoy Network Resource",{"name":61},{"id":285,"name":286,"tactic":287},"D3-NRAM","Network Resource Access Mediation",{"name":76},{"id":289,"name":290,"techniques":291},"CAPEC-218","Spoofing of UDDI/ebXML Messages",[],{"id":293,"name":294,"techniques":295},"CAPEC-384","Application API Message Manipulation via Man-in-the-Middle",[],{"id":297,"name":298,"techniques":299},"CAPEC-385","Transaction or Event Tampering via Application API Manipulation",[],{"id":301,"name":302,"techniques":303},"CAPEC-386","Application API Navigation Remapping",[],{"id":305,"name":306,"techniques":307},"CAPEC-387","Navigation Remapping To Propagate Malicious Content",[],{"id":309,"name":310,"techniques":311},"CAPEC-388","Application API Button Hijacking",[],{"id":313,"name":314,"techniques":315},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[316,347,375],{"id":317,"name":318,"tactics":319,"countermeasures":322},"T1211","Exploitation for Stealth",[320,321],{"id":112,"name":113},{"id":115,"name":116},[323,327,331,335,339,343],{"id":324,"name":325,"tactic":326},"D3-MBT","Memory Boundary Tracking",{"name":39},{"id":328,"name":329,"tactic":330},"D3-PCSV","Process Code Segment Verification",{"name":39},{"id":332,"name":333,"tactic":334},"D3-SSC","Shadow Stack Comparisons",{"name":39},{"id":336,"name":337,"tactic":338},"D3-PSEP","Process Segment Execution Prevention",{"name":66},{"id":340,"name":341,"tactic":342},"D3-SAOR","Segment Address Offset Randomization",{"name":66},{"id":344,"name":345,"tactic":346},"D3-SFCV","Stack Frame Canary Validation",{"name":66},{"id":348,"name":349,"tactics":350,"countermeasures":354},"T1542.002","Component Firmware",[351,352,353],{"id":112,"name":113},{"id":115,"name":116},{"id":29,"name":30},[355,357,359,363,367,371,373],{"id":122,"name":123,"tactic":356},{"name":125},{"id":127,"name":128,"tactic":358},{"name":125},{"id":360,"name":361,"tactic":362},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":39},{"id":364,"name":365,"tactic":366},"D3-FV","Firmware Verification",{"name":39},{"id":368,"name":369,"tactic":370},"D3-FBA","Firmware Behavior Analysis",{"name":39},{"id":135,"name":136,"tactic":372},{"name":66},{"id":139,"name":140,"tactic":374},{"name":71},{"id":376,"name":377,"tactics":378,"countermeasures":385},"T1556","Modify Authentication Process",[379,380,383,384],{"id":112,"name":113},{"id":381,"name":382},"TA0112","Defense Impairment",{"id":29,"name":30},{"id":214,"name":215},[386,390,394,398,400,402,406,410,414,418,420,424,428,432,436,438,440,442,446,448,450,452,454,456,460,464,468,472],{"id":387,"name":388,"tactic":389},"D3-CI","Configuration Inventory",{"name":125},{"id":391,"name":392,"tactic":393},"D3-NTPM","Network Traffic Policy Mapping",{"name":125},{"id":395,"name":396,"tactic":397},"D3-AM","Access Modeling",{"name":125},{"id":36,"name":37,"tactic":399},{"name":39},{"id":41,"name":42,"tactic":401},{"name":39},{"id":403,"name":404,"tactic":405},"D3-PLA","Process Lineage Analysis",{"name":39},{"id":407,"name":408,"tactic":409},"D3-PSMD","Process Self-Modification Detection",{"name":39},{"id":411,"name":412,"tactic":413},"D3-PSA","Process Spawn Analysis",{"name":39},{"id":415,"name":416,"tactic":417},"D3-SFA","System File Analysis",{"name":39},{"id":53,"name":54,"tactic":419},{"name":56},{"id":421,"name":422,"tactic":423},"D3-PT","Process Termination",{"name":56},{"id":425,"name":426,"tactic":427},"D3-PS","Process Suspension",{"name":56},{"id":429,"name":430,"tactic":431},"D3-HR","Host Reboot",{"name":56},{"id":433,"name":434,"tactic":435},"D3-HS","Host Shutdown",{"name":56},{"id":58,"name":59,"tactic":437},{"name":61},{"id":63,"name":64,"tactic":439},{"name":66},{"id":68,"name":69,"tactic":441},{"name":71},{"id":443,"name":444,"tactic":445},"D3-RC","Restore Configuration",{"name":71},{"id":73,"name":74,"tactic":447},{"name":76},{"id":78,"name":79,"tactic":449},{"name":76},{"id":82,"name":83,"tactic":451},{"name":76},{"id":86,"name":87,"tactic":453},{"name":76},{"id":90,"name":91,"tactic":455},{"name":76},{"id":457,"name":458,"tactic":459},"D3-KBPI","Kernel-based Process Isolation",{"name":76},{"id":461,"name":462,"tactic":463},"D3-SCF","System Call Filtering",{"name":76},{"id":465,"name":466,"tactic":467},"D3-HBPI","Hardware-based Process Isolation",{"name":76},{"id":469,"name":470,"tactic":471},"D3-ABPI","Application-based Process Isolation",{"name":76},{"id":473,"name":474,"tactic":475},"D3-WSAM","Web Session Access Mediation",{"name":76},{"id":477,"name":478,"techniques":479},"CAPEC-701","Browser in the Middle (BiTM)",[],[],[482],"GHSA-55jh-fwmh-39m4",[],[485,487,489],{"_key":486},"RHSA-2026:26638",{"_key":488},"RHSA-2026:27171",{"_key":490},"UBUNTU-CVE-2026-50526",[],[],"2026-07-14T19:29:54.992Z","2026-07-22T20:32:42.213Z","PUBLISHED",{"cisa_kev":497,"cisa_ransomware":497,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":498,"severity_score":4,"severity_version":499,"severity_source":500,"severity_vector":501,"severity_status":495},false,"high","v3.1","cve.org","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",[503,511,515,520,524,528],{"url":504,"sources":505,"tags":507},"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526",[500,506],"osv_nuget",[508,509,510],"Vendor Advisory","Patch","WEB",{"url":512,"sources":513,"tags":514},"https://github.com/dotnet/sdk/security/advisories/GHSA-55jh-fwmh-39m4",[506],[510],{"url":516,"sources":517,"tags":518},"https://nvd.nist.gov/vuln/detail/CVE-2026-50526",[506],[519],"Advisory",{"url":521,"sources":522,"tags":523},"https://github.com/dotnet/announcements/issues/415",[506],[510],{"url":525,"sources":526,"tags":527},"https://github.com/dotnet/sdk/issues/55274",[506],[510],{"url":529,"sources":530,"tags":531},"https://github.com/dotnet/sdk",[506],[532],"PACKAGE",[],[],[536,541],{"source":500,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":537,"cvss_v4_0":9},{"baseScore":4,"baseSeverity":538,"vectorString":501,"impactScore":539,"exploitabilityScore":540},"HIGH",9.8,2.6,{"source":506,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":542,"cvss_v4_0":9},{"baseScore":4,"baseSeverity":9,"vectorString":543,"impactScore":539,"exploitabilityScore":540},"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",[545,558,566,574,585,593,601],{"ecosystem":9,"name":546,"vendor":547,"product":548,"cpe_part":549,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":550},"Microsoft Visual Studio 2022 version 17.12","microsoft","microsoft visual studio 2022 version 17.12","a",[551],{"version":552,"is_range":553,"range_type":500,"version_start":554,"version_start_type":555,"version_end":556,"version_end_type":557,"fixed_in":9},">= 17.12.0, \u003C 17.12.22",true,"17.12.0","including","17.12.22","excluding",{"ecosystem":9,"name":559,"vendor":547,"product":560,"cpe_part":549,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":561},"Microsoft Visual Studio 2022 version 17.14","microsoft visual studio 2022 version 17.14",[562],{"version":563,"is_range":553,"range_type":500,"version_start":564,"version_start_type":555,"version_end":565,"version_end_type":557,"fixed_in":9},">= 17.14.0, \u003C 17.14.36","17.14.0","17.14.36",{"ecosystem":9,"name":567,"vendor":547,"product":568,"cpe_part":549,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":569},"Microsoft Visual Studio 2026 version 18.7","microsoft visual studio 2026 version 18.7",[570],{"version":571,"is_range":553,"range_type":500,"version_start":572,"version_start_type":555,"version_end":573,"version_end_type":557,"fixed_in":9},">= 18.0, \u003C 18.7.4","18.0","18.7.4",{"ecosystem":9,"name":575,"vendor":547,"product":576,"cpe_part":549,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":577},".NET 10.0",".net 10.0",[578,582],{"version":579,"is_range":553,"range_type":500,"version_start":580,"version_start_type":555,"version_end":581,"version_end_type":557,"fixed_in":9},">= 10.0.0, \u003C 10.0.6","10.0.0","10.0.6",{"version":583,"is_range":553,"range_type":500,"version_start":580,"version_start_type":555,"version_end":584,"version_end_type":557,"fixed_in":9},">= 10.0.0, \u003C 10.0.10","10.0.10",{"ecosystem":9,"name":586,"vendor":547,"product":587,"cpe_part":549,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":588},".NET 8.0",".net 8.0",[589],{"version":590,"is_range":553,"range_type":500,"version_start":591,"version_start_type":555,"version_end":592,"version_end_type":557,"fixed_in":9},">= 8.0.0, \u003C 8.0.29","8.0.0","8.0.29",{"ecosystem":9,"name":594,"vendor":547,"product":595,"cpe_part":549,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":596},".NET 9.0",".net 9.0",[597],{"version":598,"is_range":553,"range_type":500,"version_start":599,"version_start_type":555,"version_end":600,"version_end_type":557,"fixed_in":9},">= 9.0.0, \u003C 9.0.18","9.0.0","9.0.18",{"ecosystem":602,"name":603,"vendor":602,"product":603,"cpe_part":9,"purl_type":604,"purl_namespace":9,"purl_name":603,"source":9,"versions":605},"NuGet","Microsoft.NET.Build.Containers","nuget",[606,609,611],{"version":607,"is_range":553,"range_type":608,"version_start":580,"version_start_type":555,"version_end":584,"version_end_type":557,"fixed_in":9},"gte10_0_0_lt10_0_10","ecosystem",{"version":610,"is_range":553,"range_type":608,"version_start":599,"version_start_type":555,"version_end":600,"version_end_type":557,"fixed_in":9},"gte9_0_0_lt9_0_18",{"version":612,"is_range":553,"range_type":608,"version_start":591,"version_start_type":555,"version_end":592,"version_end_type":557,"fixed_in":9},"gte8_0_0_lt8_0_29"]