ALPINE-CVE-2026-114151: High severity alpine/dotnet9-runtime vulnerability
Published Nov 10, 2026
·Updated
Deserialization of untrusted data in Visual Studio allows an unauthorized attacker to execute code over a network.
Affected Software
1 affected componentFixes available
alpine/dotnet9-runtime<9.0.23-r0
9.0.23-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet9-runtimeto a version that resolves this vulnerability.Fixed in 9.0.23-r0
Event History
Nov 10, 2026
CVE Published
via OSV·07:19 PM
Data Sourced
via OSV·07:19 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What attacker access is required to exploit this issue?
The vulnerability is network-accessible and requires no prior privileges. Exploitation does require user interaction.
2
What is the potential impact if exploitation succeeds?
An attacker may execute code, with high impact to confidentiality, integrity, and availability.
3
Which deployed software package is identified as affected?
The affected software listed is alpine/dotnet9-runtime.