ALPINE-CVE-2026-118741: High severity alpine/dotnet9-runtime vulnerability
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/dotnet9-runtimeto a version that resolves this vulnerability.Fixed in 9.0.23-r0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the alpine/dotnet9-runtime package are the identified affected software. The issue can be exploited over a network without prior authentication or user interaction.
What level of access does an attacker need to exploit it?
No privileges or authenticated access are required. Exploitation has high attack complexity, meaning successful exploitation requires conditions beyond simply sending a basic network request.
What could a successful attacker achieve?
A successful attacker could elevate privileges. The reported impact includes high confidentiality, integrity, and availability impact.