ALPINE-CVE-2026-114146: Critical severity alpine/dotnet9-runtime vulnerability
Published Nov 10, 2026
·Updated
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Affected Software
1 affected componentFixes available
alpine/dotnet9-runtime<9.0.23-r0
9.0.23-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet9-runtimeto a version that resolves this vulnerability.Fixed in 9.0.23-r0
Event History
Nov 10, 2026
CVE Published
via OSV·07:19 PM
Data Sourced
via OSV·07:19 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need before exploiting this issue?
The attacker must already be authorized, meaning they need a valid level of access before they can attempt privilege escalation.
2
Can this be exploited remotely?
Yes. The attack vector is network-based, so exploitation can be attempted over a network.
3
Does exploitation require user interaction?
Yes. The supplied vector indicates that user interaction is required for exploitation.
4
What is the potential impact after successful exploitation?
A successful attacker can elevate privileges, with high potential impact to confidentiality, integrity, and availability. The scope may extend beyond the initially affected security authority.