CVE-2026-96238: .NET Security Feature Bypass Vulnerability
.NET Security Feature Bypass Vulnerability
Other sources
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 11.0.100-rc.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 18.10.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 8.0.426Patch KB5130034 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.113Patch KB5130036 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.14.42 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.0.122Patch KB5130035
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker can exploit it over a network without prior privileges, but user interaction is required.
What is the likely security impact?
The vulnerability allows a security feature bypass and can affect integrity. No confidentiality or availability impact is indicated by the provided severity vector.