vulnerability

Alma Linux: CVE-2025-26646: Important: .NET 9.0 security update (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:S/C:C/I:C/A:C)

Published

May 13, 2025

Added

May 20, 2025

Modified

Mar 31, 2026

Description

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.

Solutions

alma-upgrade-aspnetcore-runtime-8.0alma-upgrade-aspnetcore-runtime-9.0alma-upgrade-aspnetcore-runtime-dbg-8.0alma-upgrade-aspnetcore-runtime-dbg-9.0alma-upgrade-aspnetcore-targeting-pack-8.0alma-upgrade-aspnetcore-targeting-pack-9.0alma-upgrade-dotnetalma-upgrade-dotnet-apphost-pack-8.0alma-upgrade-dotnet-apphost-pack-9.0alma-upgrade-dotnet-hostalma-upgrade-dotnet-hostfxr-8.0alma-upgrade-dotnet-hostfxr-9.0alma-upgrade-dotnet-runtime-8.0alma-upgrade-dotnet-runtime-9.0alma-upgrade-dotnet-runtime-dbg-8.0alma-upgrade-dotnet-runtime-dbg-9.0alma-upgrade-dotnet-sdk-8.0alma-upgrade-dotnet-sdk-8.0-source-built-artifactsalma-upgrade-dotnet-sdk-9.0alma-upgrade-dotnet-sdk-9.0-source-built-artifactsalma-upgrade-dotnet-sdk-aot-9.0alma-upgrade-dotnet-sdk-dbg-8.0alma-upgrade-dotnet-sdk-dbg-9.0alma-upgrade-dotnet-targeting-pack-8.0alma-upgrade-dotnet-targeting-pack-9.0alma-upgrade-dotnet-templates-8.0alma-upgrade-dotnet-templates-9.0alma-upgrade-netstandard-targeting-pack-2.1

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report