Upstream information
CVE-2026-26127 at MITRE
Description
Overall state of this security issue: Resolved
This issue is currently rated as having important severity.
CVSS v3 Scores
| CVSS detail | CNA (Microsoft) |
| Base Score | 7.5 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| Attack Vector | Network |
| Attack Complexity | Low |
| Privileges Required | None |
| User Interaction | None |
| Scope | Unchanged |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | High |
| CVSSv3 Version | 3.1 |
No SUSE Bugzilla entries cross referenced.
SUSE Security Advisories:
List of released packages
| Product(s) | Fixed package version(s) | References |
| SUSE Liberty Linux 8 | aspnetcore-runtime-10.0 >= 10.0.4-1.el8_10
aspnetcore-runtime-9.0 >= 9.0.14-1.el8_10
aspnetcore-runtime-dbg-10.0 >= 10.0.4-1.el8_10
aspnetcore-runtime-dbg-9.0 >= 9.0.14-1.el8_10
aspnetcore-targeting-pack-10.0 >= 10.0.4-1.el8_10
aspnetcore-targeting-pack-9.0 >= 9.0.14-1.el8_10
dotnet >= 10.0.104-1.el8_10
dotnet-apphost-pack-10.0 >= 10.0.4-1.el8_10
dotnet-apphost-pack-9.0 >= 9.0.14-1.el8_10
dotnet-host >= 10.0.4-1.el8_10
dotnet-hostfxr-10.0 >= 10.0.4-1.el8_10
dotnet-hostfxr-9.0 >= 9.0.14-1.el8_10
dotnet-runtime-10.0 >= 10.0.4-1.el8_10
dotnet-runtime-9.0 >= 9.0.14-1.el8_10
dotnet-runtime-dbg-10.0 >= 10.0.4-1.el8_10
dotnet-runtime-dbg-9.0 >= 9.0.14-1.el8_10
dotnet-sdk-10.0 >= 10.0.104-1.el8_10
dotnet-sdk-10.0-source-built-artifacts >= 10.0.104-1.el8_10
dotnet-sdk-9.0 >= 9.0.115-1.el8_10
dotnet-sdk-9.0-source-built-artifacts >= 9.0.115-1.el8_10
dotnet-sdk-aot-10.0 >= 10.0.104-1.el8_10
dotnet-sdk-aot-9.0 >= 9.0.115-1.el8_10
dotnet-sdk-dbg-10.0 >= 10.0.104-1.el8_10
dotnet-sdk-dbg-9.0 >= 9.0.115-1.el8_10
dotnet-targeting-pack-10.0 >= 10.0.4-1.el8_10
dotnet-targeting-pack-9.0 >= 9.0.14-1.el8_10
dotnet-templates-10.0 >= 10.0.104-1.el8_10
dotnet-templates-9.0 >= 9.0.115-1.el8_10
netstandard-targeting-pack-2.1 >= 9.0.115-1.el8_10
| Patchnames: RHSA-2026:4443 RHSA-2026:4458 |
SUSE Timeline for this CVE
CVE page created: Tue Mar 10 20:02:55 2026
CVE page last modified: Tue Mar 17 20:47:12 2026