CVE-2026-62909

Upstream information

CVE-2026-62909 at MITRE

Description

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v3 Scores

CVSS detail	CNA (Microsoft)
Base Score	7.8
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector	Local
Attack Complexity	High
Privileges Required	Low
User Interaction	None
Scope	Changed
Confidentiality Impact	High
Integrity Impact	High
Availability Impact	High
CVSSv3 Version	3.1

No SUSE Bugzilla entries cross referenced.

SUSE Security Advisories:

• RHSA-2026:54538, published Mon Aug 17 15:07:05 UTC 2026
• RHSA-2026:54541, published Mon Aug 17 15:07:06 UTC 2026
• RHSA-2026:54542, published Tue Aug 18 15:07:11 UTC 2026
• RHSA-2026:54550, published Mon Aug 17 15:07:05 UTC 2026
• RHSA-2026:54574, published Mon Aug 17 15:07:08 UTC 2026
• RHSA-2026:54590, published Mon Aug 17 15:07:06 UTC 2026
• RHSA-2026:55856, published Tue Aug 18 15:07:10 UTC 2026

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Liberty Linux 10	aspnetcore-runtime-10.0 >= 10.0.11-1.el10_2 aspnetcore-runtime-8.0 >= 8.0.30-1.el10_2 aspnetcore-runtime-9.0 >= 9.0.19-1.el10_2 aspnetcore-runtime-dbg-10.0 >= 10.0.11-1.el10_2 aspnetcore-runtime-dbg-8.0 >= 8.0.30-1.el10_2 aspnetcore-runtime-dbg-9.0 >= 9.0.19-1.el10_2 aspnetcore-targeting-pack-10.0 >= 10.0.11-1.el10_2 aspnetcore-targeting-pack-8.0 >= 8.0.30-1.el10_2 aspnetcore-targeting-pack-9.0 >= 9.0.19-1.el10_2 dotnet-apphost-pack-10.0 >= 10.0.11-1.el10_2 dotnet-apphost-pack-8.0 >= 8.0.30-1.el10_2 dotnet-apphost-pack-9.0 >= 9.0.19-1.el10_2 dotnet-host >= 10.0.11-1.el10_2 dotnet-hostfxr-10.0 >= 10.0.11-1.el10_2 dotnet-hostfxr-8.0 >= 8.0.30-1.el10_2 dotnet-hostfxr-9.0 >= 9.0.19-1.el10_2 dotnet-runtime-10.0 >= 10.0.11-1.el10_2 dotnet-runtime-8.0 >= 8.0.30-1.el10_2 dotnet-runtime-9.0 >= 9.0.19-1.el10_2 dotnet-runtime-dbg-10.0 >= 10.0.11-1.el10_2 dotnet-runtime-dbg-8.0 >= 8.0.30-1.el10_2 dotnet-runtime-dbg-9.0 >= 9.0.19-1.el10_2 dotnet-sdk-10.0 >= 10.0.111-1.el10_2 dotnet-sdk-10.0-source-built-artifacts >= 10.0.111-1.el10_2 dotnet-sdk-8.0 >= 8.0.130-1.el10_2 dotnet-sdk-8.0-source-built-artifacts >= 8.0.130-1.el10_2 dotnet-sdk-9.0 >= 9.0.120-1.el10_2 dotnet-sdk-9.0-source-built-artifacts >= 9.0.120-1.el10_2 dotnet-sdk-aot-10.0 >= 10.0.111-1.el10_2 dotnet-sdk-aot-9.0 >= 9.0.120-1.el10_2 dotnet-sdk-dbg-10.0 >= 10.0.111-1.el10_2 dotnet-sdk-dbg-8.0 >= 8.0.130-1.el10_2 dotnet-sdk-dbg-9.0 >= 9.0.120-1.el10_2 dotnet-targeting-pack-10.0 >= 10.0.11-1.el10_2 dotnet-targeting-pack-8.0 >= 8.0.30-1.el10_2 dotnet-targeting-pack-9.0 >= 9.0.19-1.el10_2 dotnet-templates-10.0 >= 10.0.111-1.el10_2 dotnet-templates-8.0 >= 8.0.130-1.el10_2 dotnet-templates-9.0 >= 9.0.120-1.el10_2 netstandard-targeting-pack-2.1 >= 9.0.120-1.el10_2	Patchnames: RHSA-2026:54541 RHSA-2026:54590 RHSA-2026:55858
SUSE Liberty Linux 8	aspnetcore-runtime-10.0 >= 10.0.11-1.el8_10 aspnetcore-runtime-8.0 >= 8.0.30-1.el8_10 aspnetcore-runtime-9.0 >= 9.0.19-1.el8_10 aspnetcore-runtime-dbg-10.0 >= 10.0.11-1.el8_10 aspnetcore-runtime-dbg-8.0 >= 8.0.30-1.el8_10 aspnetcore-runtime-dbg-9.0 >= 9.0.19-1.el8_10 aspnetcore-targeting-pack-10.0 >= 10.0.11-1.el8_10 aspnetcore-targeting-pack-8.0 >= 8.0.30-1.el8_10 aspnetcore-targeting-pack-9.0 >= 9.0.19-1.el8_10 dotnet >= 10.0.111-1.el8_10 dotnet-apphost-pack-10.0 >= 10.0.11-1.el8_10 dotnet-apphost-pack-8.0 >= 8.0.30-1.el8_10 dotnet-apphost-pack-9.0 >= 9.0.19-1.el8_10 dotnet-host >= 10.0.11-1.el8_10 dotnet-hostfxr-10.0 >= 10.0.11-1.el8_10 dotnet-hostfxr-8.0 >= 8.0.30-1.el8_10 dotnet-hostfxr-9.0 >= 9.0.19-1.el8_10 dotnet-runtime-10.0 >= 10.0.11-1.el8_10 dotnet-runtime-8.0 >= 8.0.30-1.el8_10 dotnet-runtime-9.0 >= 9.0.19-1.el8_10 dotnet-runtime-dbg-10.0 >= 10.0.11-1.el8_10 dotnet-runtime-dbg-8.0 >= 8.0.30-1.el8_10 dotnet-runtime-dbg-9.0 >= 9.0.19-1.el8_10 dotnet-sdk-10.0 >= 10.0.111-1.el8_10 dotnet-sdk-10.0-source-built-artifacts >= 10.0.111-1.el8_10 dotnet-sdk-8.0 >= 8.0.130-1.el8_10 dotnet-sdk-8.0-source-built-artifacts >= 8.0.130-1.el8_10 dotnet-sdk-9.0 >= 9.0.120-1.el8_10 dotnet-sdk-9.0-source-built-artifacts >= 9.0.120-1.el8_10 dotnet-sdk-aot-10.0 >= 10.0.111-1.el8_10 dotnet-sdk-aot-9.0 >= 9.0.120-1.el8_10 dotnet-sdk-dbg-10.0 >= 10.0.111-1.el8_10 dotnet-sdk-dbg-8.0 >= 8.0.130-1.el8_10 dotnet-sdk-dbg-9.0 >= 9.0.120-1.el8_10 dotnet-targeting-pack-10.0 >= 10.0.11-1.el8_10 dotnet-targeting-pack-8.0 >= 8.0.30-1.el8_10 dotnet-targeting-pack-9.0 >= 9.0.19-1.el8_10 dotnet-templates-10.0 >= 10.0.111-1.el8_10 dotnet-templates-8.0 >= 8.0.130-1.el8_10 dotnet-templates-9.0 >= 9.0.120-1.el8_10 netstandard-targeting-pack-2.1 >= 9.0.120-1.el8_10	Patchnames: RHSA-2026:54538 RHSA-2026:54542 RHSA-2026:54550
SUSE Liberty Linux 9	aspnetcore-runtime-10.0 >= 10.0.11-1.el9_8 aspnetcore-runtime-8.0 >= 8.0.30-1.el9_8 aspnetcore-runtime-9.0 >= 9.0.19-1.el9_8 aspnetcore-runtime-dbg-10.0 >= 10.0.11-1.el9_8 aspnetcore-runtime-dbg-8.0 >= 8.0.30-1.el9_8 aspnetcore-runtime-dbg-9.0 >= 9.0.19-1.el9_8 aspnetcore-targeting-pack-10.0 >= 10.0.11-1.el9_8 aspnetcore-targeting-pack-8.0 >= 8.0.30-1.el9_8 aspnetcore-targeting-pack-9.0 >= 9.0.19-1.el9_8 dotnet-apphost-pack-10.0 >= 10.0.11-1.el9_8 dotnet-apphost-pack-8.0 >= 8.0.30-1.el9_8 dotnet-apphost-pack-9.0 >= 9.0.19-1.el9_8 dotnet-host >= 10.0.11-1.el9_8 dotnet-hostfxr-10.0 >= 10.0.11-1.el9_8 dotnet-hostfxr-8.0 >= 8.0.30-1.el9_8 dotnet-hostfxr-9.0 >= 9.0.19-1.el9_8 dotnet-runtime-10.0 >= 10.0.11-1.el9_8 dotnet-runtime-8.0 >= 8.0.30-1.el9_8 dotnet-runtime-9.0 >= 9.0.19-1.el9_8 dotnet-runtime-dbg-10.0 >= 10.0.11-1.el9_8 dotnet-runtime-dbg-8.0 >= 8.0.30-1.el9_8 dotnet-runtime-dbg-9.0 >= 9.0.19-1.el9_8 dotnet-sdk-10.0 >= 10.0.111-1.el9_8 dotnet-sdk-10.0-source-built-artifacts >= 10.0.111-1.el9_8 dotnet-sdk-8.0 >= 8.0.130-1.el9_8 dotnet-sdk-8.0-source-built-artifacts >= 8.0.130-1.el9_8 dotnet-sdk-9.0 >= 9.0.120-1.el9_8 dotnet-sdk-9.0-source-built-artifacts >= 9.0.120-1.el9_8 dotnet-sdk-aot-10.0 >= 10.0.111-1.el9_8 dotnet-sdk-aot-9.0 >= 9.0.120-1.el9_8 dotnet-sdk-dbg-10.0 >= 10.0.111-1.el9_8 dotnet-sdk-dbg-8.0 >= 8.0.130-1.el9_8 dotnet-sdk-dbg-9.0 >= 9.0.120-1.el9_8 dotnet-targeting-pack-10.0 >= 10.0.11-1.el9_8 dotnet-targeting-pack-8.0 >= 8.0.30-1.el9_8 dotnet-targeting-pack-9.0 >= 9.0.19-1.el9_8 dotnet-templates-10.0 >= 10.0.111-1.el9_8 dotnet-templates-8.0 >= 8.0.130-1.el9_8 dotnet-templates-9.0 >= 9.0.120-1.el9_8 netstandard-targeting-pack-2.1 >= 9.0.120-1.el9_8	Patchnames: RHSA-2026:54574 RHSA-2026:55856 RHSA-2026:55857

---

SUSE Timeline for this CVE

CVE page created: Mon Aug 17 13:42:05 2026
CVE page last modified: Tue Aug 18 20:42:55 2026