RHSA-2026:41899: aspnetcore-runtime-9.0 Red Hat

CVSS: 8.8v3.1HighPublished

Published 23-07-2026Last modified 17-10-2026

Open JSON

Vulnerability summary

RHSA-2026:41899 is a high (CVSS 8.8) vulnerability in aspnetcore-runtime-9.0 Red Hat.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 17 · Downstream 0

CVE-2026-47300 CVE-2026-47302 CVE-2026-47303 CVE-2026-47304 CVE-2026-50524 CVE-2026-50525+11 more

Timeline

23-07-2026
PublishedVulnerability first disclosed.
17-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

CVSS metrics

1 score · 1 source · 1 version

v3.18.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat22 products

aspnetcore-runtime-9.0< 0:9.0.18-1.el8_10
aspnetcore-runtime-dbg-9.0< 0:9.0.18-1.el8_10
aspnetcore-targeting-pack-9.0< 0:9.0.18-1.el8_10
dotnet-apphost-pack-9.0< 0:9.0.18-1.el8_10
dotnet-apphost-pack-9.0-debuginfo< 0:9.0.18-1.el8_10

Show all 22

1 vendor · 22 products

References

87 links

Show all 87 references

bugzilla.redhat.com/show_bug.cgi?id=2500562REPORT
bugzilla.redhat.com/show_bug.cgi?id=2500563REPORT
bugzilla.redhat.com/show_bug.cgi?id=2500565REPORT
bugzilla.redhat.com/show_bug.cgi?id=2500577REPORT
bugzilla.redhat.com/show_bug.cgi?id=2500580REPORT
bugzilla.redhat.com/show_bug.cgi?id=2500581REPORT
bugzilla.redhat.com/show_bug.cgi?id=2500587REPORT
bugzilla.redhat.com/show_bug.cgi?id=2500589REPORT
bugzilla.redhat.com/show_bug.cgi?id=2500593REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41899.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-47300REPORT
www.cve.org/CVERecord?id=CVE-2026-47300Advisory
nvd.nist.gov/vuln/detail/CVE-2026-47300Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300ARTICLE
access.redhat.com/security/cve/CVE-2026-47302REPORT
www.cve.org/CVERecord?id=CVE-2026-47302Advisory
nvd.nist.gov/vuln/detail/CVE-2026-47302Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47302ARTICLE
access.redhat.com/security/cve/CVE-2026-47303REPORT
www.cve.org/CVERecord?id=CVE-2026-47303Advisory
nvd.nist.gov/vuln/detail/CVE-2026-47303Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303ARTICLE
access.redhat.com/security/cve/CVE-2026-47304REPORT
www.cve.org/CVERecord?id=CVE-2026-47304Advisory
nvd.nist.gov/vuln/detail/CVE-2026-47304Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47304ARTICLE
access.redhat.com/security/cve/CVE-2026-50524REPORT
www.cve.org/CVERecord?id=CVE-2026-50524Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50524Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50524ARTICLE
access.redhat.com/security/cve/CVE-2026-50525REPORT
www.cve.org/CVERecord?id=CVE-2026-50525Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50525Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50525ARTICLE
access.redhat.com/security/cve/CVE-2026-50526REPORT
www.cve.org/CVERecord?id=CVE-2026-50526Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50526Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50526ARTICLE
access.redhat.com/security/cve/CVE-2026-50527REPORT
www.cve.org/CVERecord?id=CVE-2026-50527Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50527Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50527ARTICLE
access.redhat.com/security/cve/CVE-2026-50528REPORT
www.cve.org/CVERecord?id=CVE-2026-50528Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50528Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50528ARTICLE
access.redhat.com/security/cve/CVE-2026-50646REPORT
www.cve.org/CVERecord?id=CVE-2026-50646Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50646Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50646ARTICLE
access.redhat.com/security/cve/CVE-2026-50648REPORT
www.cve.org/CVERecord?id=CVE-2026-50648Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50648Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50648ARTICLE
access.redhat.com/security/cve/CVE-2026-50649REPORT
www.cve.org/CVERecord?id=CVE-2026-50649Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50649Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50649ARTICLE
access.redhat.com/security/cve/CVE-2026-50650REPORT
www.cve.org/CVERecord?id=CVE-2026-50650Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50650Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50650ARTICLE
access.redhat.com/security/cve/CVE-2026-50651REPORT
www.cve.org/CVERecord?id=CVE-2026-50651Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50651Advisory
access.redhat.com/security/cve/CVE-2026-50659REPORT
www.cve.org/CVERecord?id=CVE-2026-50659Advisory
nvd.nist.gov/vuln/detail/CVE-2026-50659Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659ARTICLE
access.redhat.com/security/cve/CVE-2026-56170REPORT
www.cve.org/CVERecord?id=CVE-2026-56170Advisory
nvd.nist.gov/vuln/detail/CVE-2026-56170Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170ARTICLE
access.redhat.com/security/cve/CVE-2026-57108REPORT
www.cve.org/CVERecord?id=CVE-2026-57108Advisory
nvd.nist.gov/vuln/detail/CVE-2026-57108Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57108ARTICLE