CVE-2026-70194Medium· 6.5▾ SunlitImproper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
0.4% → 0.5%
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
Microsoft.NETCore.App.Runtime.linux-arm >= 11.0.0-preview.1, <= 11.0.0-rc.1Microsoft.NETCore.App.Runtime.linux-arm64 >= 11.0.0-preview.1, <= 11.0.0-rc.1Microsoft.NETCore.App.Runtime.linux-musl-arm >= 11.0.0-preview.1, <= 11.0.0-rc.1Microsoft.NETCore.App.Runtime.linux-musl-arm64 >= 11.0.0-preview.1, <= 11.0.0-rc.1Microsoft.NETCore.App.Runtime.linux-musl-x64 >= 11.0.0-preview.1, <= 11.0.0-rc.1Microsoft.NETCore.App.Runtime.linux-x64 >= 11.0.0-preview.1, <= 11.0.0-rc.1Microsoft.NETCore.App.Runtime.osx-arm64 >= 11.0.0-preview.1, <= 11.0.0-rc.1Microsoft.NETCore.App.Runtime.osx-x64 >= 11.0.0-preview.1, <= 11.0.0-rc.1Patched in:
Microsoft.NETCore.App.Runtime.linux-arm 11.0.0-rc.2Microsoft.NETCore.App.Runtime.linux-arm64 11.0.0-rc.2Microsoft.NETCore.App.Runtime.linux-musl-arm 11.0.0-rc.2Microsoft.NETCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2Microsoft.NETCore.App.Runtime.linux-musl-x64 11.0.0-rc.2Microsoft.NETCore.App.Runtime.linux-x64 11.0.0-rc.2Microsoft.NETCore.App.Runtime.osx-arm64 11.0.0-rc.2Microsoft.NETCore.App.Runtime.osx-x64 11.0.0-rc.2Connected by shared product, vendor, weakness, or advisory.
CVE-2020-1113Medium· 5.3A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC
CVE-2026-83938Critical· 10.0Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
CVE-2026-110063Critical· 10.0VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
CVE-2026-97785Critical· 10.0AAD App Proxy Elevation of Privilege Vulnerability
CVE-2026-96185High· 7.5Microsoft Exchange Online Remote Code Execution Vulnerability
CVE-2026-108456High· 7.7Azure AI Foundry Elevation of Privilege Vulnerability