CVE-2026-26171

Description

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Affected packages (4)

• Bitnami/dotnet>= 8.0.0, < 8.0.26, >= 9.0.0, < 9.0.15, >= 10.0.0, < 10.0.6
• Bitnami/dotnet-sdk>= 8.0.0, < 8.0.26, >= 9.0.0, < 9.0.15, >= 10.0.0, < 10.0.6
• Bitnami/powershell>= 7.5.0, < 7.5.6, >= 7.6.0, < 7.6.1
• NuGet/System.Security.Cryptography.Xml>= 10.0.0, < 10.0.6

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-26171
• PATCHhttps://github.com/dotnet/runtime
• WEBhttps://github.com/dotnet/announcements/issues/389
• WEBhttps://github.com/dotnet/runtime/security/advisories/GHSA-w3x6-4m5h-cxqf
• WEBhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171