CVE-2026-50659Medium· 6.5▾ Sunlit

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score36/ 100 · Low

impact 35.8 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Jul 14, 2026

Updated

Oct 14, 2026

CVSS

6.5

Vendor

microsoft

Product

.net_framework

CWE

CWE-116, CWE-838

Depth score

36 · Low

EPSS

0.74% · p54

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

decided 2026-07-14

Exploitation: none
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Aug 1.

0.5% → 0.7%▲ 0.2%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 92 days

Jul 14, 2026Published
Disclosed via NVD
Aug 1, 2026EPSS first tracked
0.5%
Sep 25, 2026EPSS peak
0.5% → 0.7%
Oct 14, 2026Record revised
Last analysed / modified upstream

microsoft CWE-116 CWE-838 #nvd #cve.org #ghsa #nuget #csaf #vex #red-hat

Affected

.net_framework = 4.8.1
.net_framework = 4.8
.net_framework = 4.6.2
.net_framework = 4.7
.net_framework = 4.7.1
.net_framework = 4.7.2
.net >= 8.0.0, < 8.0.29
.net >= 9.0.0, < 9.0.18
.net >= 10.0.0, < 10.0.6
.net_framework = 3.5
visual_studio_2022 >= 17.12.0, < 17.12.22
visual_studio_2022 >= 17.14.0, < 17.14.36
visual_studio_2026 >= 18.7.0, < 18.7.4

Patched in

.net 10.0.6
visual_studio_2022 17.14.36
visual_studio_2026 18.7.4

Full technical detail▾

Overview

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

Affected

.net_framework = 4.8.1
.net_framework = 4.8
.net_framework = 4.6.2
.net_framework = 4.7
.net_framework = 4.7.1
.net_framework = 4.7.2
.net >= 8.0.0, < 8.0.29
.net >= 9.0.0, < 9.0.18
.net >= 10.0.0, < 10.0.6
.net_framework = 3.5
visual_studio_2022 >= 17.12.0, < 17.12.22
visual_studio_2022 >= 17.14.0, < 17.14.36
visual_studio_2026 >= 18.7.0, < 18.7.4

Remediation

Upgrade past the affected range:

.net 10.0.6
visual_studio_2022 17.14.36
visual_studio_2026 18.7.4

Package advisory (CVE-2026-50659)

Affected packages:

Microsoft.NetCore.App.Runtime.linux-arm >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.linux-arm64 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.linux-musl-arm >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.linux-musl-arm64 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.linux-musl-x64 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.linux-x64 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.osx-arm64 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.osx-x64 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.win-arm >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.win-arm64 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.win-x64 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.win-x86 >= 10.0.0, <= 10.0.9
Microsoft.NetCore.App.Runtime.linux-arm >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.linux-arm64 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.linux-musl-arm >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.linux-musl-arm64 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.linux-musl-x64 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.linux-x64 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.osx-arm64 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.osx-x64 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.win-arm >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.win-arm64 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.win-x64 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.win-x86 >= 9.0.0, <= 9.0.17
Microsoft.NetCore.App.Runtime.linux-arm >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.linux-arm64 >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.linux-musl-arm >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.linux-musl-arm64 >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.linux-musl-x64 >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.linux-x64 >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.osx-arm64 >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.osx-x64 >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.win-arm >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.win-arm64 >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.win-x64 >= 8.0.0, <= 8.0.28
Microsoft.NetCore.App.Runtime.win-x86 >= 8.0.0, <= 8.0.28

Patched in:

Microsoft.NetCore.App.Runtime.linux-arm 10.0.10
Microsoft.NetCore.App.Runtime.linux-arm64 10.0.10
Microsoft.NetCore.App.Runtime.linux-musl-arm 10.0.10
Microsoft.NetCore.App.Runtime.linux-musl-arm64 10.0.10
Microsoft.NetCore.App.Runtime.linux-musl-x64 10.0.10
Microsoft.NetCore.App.Runtime.linux-x64 10.0.10
Microsoft.NetCore.App.Runtime.osx-arm64 10.0.10
Microsoft.NetCore.App.Runtime.osx-x64 10.0.10
Microsoft.NetCore.App.Runtime.win-arm 10.0.10
Microsoft.NetCore.App.Runtime.win-arm64 10.0.10
Microsoft.NetCore.App.Runtime.win-x64 10.0.10
Microsoft.NetCore.App.Runtime.win-x86 10.0.10
Microsoft.NetCore.App.Runtime.linux-arm 9.0.18
Microsoft.NetCore.App.Runtime.linux-arm64 9.0.18
Microsoft.NetCore.App.Runtime.linux-musl-arm 9.0.18
Microsoft.NetCore.App.Runtime.linux-musl-arm64 9.0.18
Microsoft.NetCore.App.Runtime.linux-musl-x64 9.0.18
Microsoft.NetCore.App.Runtime.linux-x64 9.0.18
Microsoft.NetCore.App.Runtime.osx-arm64 9.0.18
Microsoft.NetCore.App.Runtime.osx-x64 9.0.18
Microsoft.NetCore.App.Runtime.win-arm 9.0.18
Microsoft.NetCore.App.Runtime.win-arm64 9.0.18
Microsoft.NetCore.App.Runtime.win-x64 9.0.18
Microsoft.NetCore.App.Runtime.win-x86 9.0.18
Microsoft.NetCore.App.Runtime.linux-arm 8.0.29
Microsoft.NetCore.App.Runtime.linux-arm64 8.0.29
Microsoft.NetCore.App.Runtime.linux-musl-arm 8.0.29
Microsoft.NetCore.App.Runtime.linux-musl-arm64 8.0.29
Microsoft.NetCore.App.Runtime.linux-musl-x64 8.0.29
Microsoft.NetCore.App.Runtime.linux-x64 8.0.29
Microsoft.NetCore.App.Runtime.osx-arm64 8.0.29
Microsoft.NetCore.App.Runtime.osx-x64 8.0.29
Microsoft.NetCore.App.Runtime.win-arm 8.0.29
Microsoft.NetCore.App.Runtime.win-arm64 8.0.29
Microsoft.NetCore.App.Runtime.win-x64 8.0.29
Microsoft.NetCore.App.Runtime.win-x86 8.0.29

Source: https://github.com/advisories/GHSA-74jp-vm22-8q8x

Vendor advisories

RHSA-2026:58566 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) · released 2026-08-24 · advisory
RHSA-2026:58567 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) · released 2026-08-24 · advisory
RHSA-2026:41897 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-07-20 · advisory
RHSA-2026:41893 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-07-20 · advisory
RHSA-2026:41895 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-07-20 · advisory
RHSA-2026:41900 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-07-20 · advisory
RHSA-2026:41901 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-07-20 · advisory
RHSA-2026:41899 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-07-20 · advisory
RHSA-2026:58568 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.9.4) · released 2026-08-24 · advisory
RHSA-2026:58569 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat CodeReady Linux Builder EUS (v.9.6) · released 2026-08-24 · advisory
RHSA-2026:58570 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat CodeReady Linux Builder EUS (v.9.6) · released 2026-08-24 · advisory

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org#ghsa#nuget#csaf#vex#red-hat

Affected

.net_framework = 4.8.1

.net_framework = 4.8

.net_framework = 4.6.2

.net_framework = 4.7

.net_framework = 4.7.1

.net_framework = 4.7.2

.net >= 8.0.0, < 8.0.29

.net >= 9.0.0, < 9.0.18

.net >= 10.0.0, < 10.0.6

.net_framework = 3.5

visual_studio_2022 >= 17.12.0, < 17.12.22

visual_studio_2022 >= 17.14.0, < 17.14.36

visual_studio_2026 >= 18.7.0, < 18.7.4

Package advisory (CVE-2026-50659)

Affected packages:

Microsoft.NetCore.App.Runtime.linux-arm >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.linux-arm64 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.linux-musl-arm >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.linux-musl-arm64 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.linux-musl-x64 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.linux-x64 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.osx-arm64 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.osx-x64 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.win-arm >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.win-arm64 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.win-x64 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.win-x86 >= 10.0.0, <= 10.0.9

Microsoft.NetCore.App.Runtime.linux-arm >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.linux-arm64 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.linux-musl-arm >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.linux-musl-arm64 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.linux-musl-x64 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.linux-x64 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.osx-arm64 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.osx-x64 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.win-arm >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.win-arm64 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.win-x64 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.win-x86 >= 9.0.0, <= 9.0.17

Microsoft.NetCore.App.Runtime.linux-arm >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.linux-arm64 >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.linux-musl-arm >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.linux-musl-arm64 >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.linux-musl-x64 >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.linux-x64 >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.osx-arm64 >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.osx-x64 >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.win-arm >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.win-arm64 >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.win-x64 >= 8.0.0, <= 8.0.28

Microsoft.NetCore.App.Runtime.win-x86 >= 8.0.0, <= 8.0.28

Patched in:

Microsoft.NetCore.App.Runtime.linux-arm 10.0.10

Microsoft.NetCore.App.Runtime.linux-arm64 10.0.10

Microsoft.NetCore.App.Runtime.linux-musl-arm 10.0.10

Microsoft.NetCore.App.Runtime.linux-musl-arm64 10.0.10

Microsoft.NetCore.App.Runtime.linux-musl-x64 10.0.10

Microsoft.NetCore.App.Runtime.linux-x64 10.0.10

Microsoft.NetCore.App.Runtime.osx-arm64 10.0.10

Microsoft.NetCore.App.Runtime.osx-x64 10.0.10

Microsoft.NetCore.App.Runtime.win-arm 10.0.10

Microsoft.NetCore.App.Runtime.win-arm64 10.0.10

Microsoft.NetCore.App.Runtime.win-x64 10.0.10

Microsoft.NetCore.App.Runtime.win-x86 10.0.10

Microsoft.NetCore.App.Runtime.linux-arm 9.0.18

Microsoft.NetCore.App.Runtime.linux-arm64 9.0.18

Microsoft.NetCore.App.Runtime.linux-musl-arm 9.0.18

Microsoft.NetCore.App.Runtime.linux-musl-arm64 9.0.18

Microsoft.NetCore.App.Runtime.linux-musl-x64 9.0.18

Microsoft.NetCore.App.Runtime.linux-x64 9.0.18

Microsoft.NetCore.App.Runtime.osx-arm64 9.0.18

Microsoft.NetCore.App.Runtime.osx-x64 9.0.18

Microsoft.NetCore.App.Runtime.win-arm 9.0.18

Microsoft.NetCore.App.Runtime.win-arm64 9.0.18

Microsoft.NetCore.App.Runtime.win-x64 9.0.18

Microsoft.NetCore.App.Runtime.win-x86 9.0.18

Microsoft.NetCore.App.Runtime.linux-arm 8.0.29

Microsoft.NetCore.App.Runtime.linux-arm64 8.0.29

Microsoft.NetCore.App.Runtime.linux-musl-arm 8.0.29

Microsoft.NetCore.App.Runtime.linux-musl-arm64 8.0.29

Microsoft.NetCore.App.Runtime.linux-musl-x64 8.0.29

Microsoft.NetCore.App.Runtime.linux-x64 8.0.29

Microsoft.NetCore.App.Runtime.osx-arm64 8.0.29

Microsoft.NetCore.App.Runtime.osx-x64 8.0.29

Microsoft.NetCore.App.Runtime.win-arm 8.0.29

Microsoft.NetCore.App.Runtime.win-arm64 8.0.29

Microsoft.NetCore.App.Runtime.win-x64 8.0.29

Microsoft.NetCore.App.Runtime.win-x86 8.0.29

Vendor advisories

RHSA-2026:58566 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) · released 2026-08-24 · advisory

RHSA-2026:58567 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) · released 2026-08-24 · advisory

RHSA-2026:41897 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-07-20 · advisory

RHSA-2026:41893 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-07-20 · advisory

RHSA-2026:41895 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-07-20 · advisory

RHSA-2026:41900 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-07-20 · advisory

RHSA-2026:41901 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-07-20 · advisory

RHSA-2026:41899 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-07-20 · advisory

RHSA-2026:58568 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.9.4) · released 2026-08-24 · advisory

RHSA-2026:58569 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat CodeReady Linux Builder EUS (v.9.6) · released 2026-08-24 · advisory

RHSA-2026:58570 · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat CodeReady Linux Builder EUS (v.9.6) · released 2026-08-24 · advisory