CVE-2026-70194
CVE-2026-70194 · .NET Framework Security Feature Bypass Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.
CVSS 6.5 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
.net 11.0 runtime
- Versions
- ≥ 11.0.0, < 11.0.0-rc.2: Affected (custom)
No fix published
microsoft visual studio 2022 version 17.14
- Versions
- ≥ 17.14.0, < 17.14.42: Affected (custom)
Update to 17.14.42
microsoft visual studio 2026 version 18.10
- Versions
- ≥ 18.10.0, < 18.10.4: Affected (custom)
Update to 18.10.4
dotnet7 Ubuntu:22.04:LTS
- Versions
- 7.0.105-0ubuntu1~22.04.1
- 7.0.107-0ubuntu1~22.04.1
- 7.0.108-0ubuntu1~22.04.1
- 7.0.109-0ubuntu1~22.04.1
- 7.0.110-0ubuntu1~22.04.1
- 7.0.111-0ubuntu1~22.04.1
- 7.0.112-0ubuntu1~22.04.1
- 7.0.113-0ubuntu1~22.04.1
- 7.0.114-0ubuntu1~22.04.1
- 7.0.115-0ubuntu1~22.04.1
- 7.0.116-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.2
- 7.0.119-0ubuntu1~22.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
dotnet11 Ubuntu:26.10
- Versions
- 11.0.100-11.0.0~rc1-0ubuntu1
- Affected ranges
- ECOSYSTEM: < 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1
Update to 11.0.100-11.0.0~rc2-0ubuntu1~26.10.1