RHSA-2026:99170: Important: .NET 11.0 security, bug fix, and enhancement update

Published Nov 11, 2026

Updated

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.SDK version: 11.0.100~rc.3.26522.148Runtime version: 11.0.0~rc.3.26522.148Security Fix(es): dotnet8.0: dotnet9.0: dotnet11.0: dotnet10.0: ASP.NET Core Elevation of Privilege Vulnerability (CVE-2026-114148) Bug Fix(es) and Enhancement(s): Update .NET 11 to RC 3 [rhel-9.9.z] (JIRA:RHEL-293375) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

0 affected components

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade .NET SDK to a version that resolves this vulnerability.
Fixed in 11.0.100~rc.3.26522.148
Upgrade
Upgrade .NET Runtime to a version that resolves this vulnerability.
Fixed in 11.0.0~rc.3.26522.148

Event History

Nov 11, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

Which .NET components are covered by the security fix?

The advisory lists the ASP.NET Core elevation of privilege vulnerability as affecting dotnet 8.0, 9.0, 10.0, and 11.0.

What versions does this update provide?

The update provides SDK version 11.0.100~rc.3.26522.148 and runtime version 11.0.0~rc.3.26522.148.