UBUNTU-CVE-2026-118746: Medium severity ubuntu/dotnet7 vulnerability
Published Nov 10, 2026
·Updated
Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.
Affected Software
2 affected componentsFixes available
ubuntu/dotnet7*
ubuntu/dotnet11<11.0.100-11.0.0-0ubuntu1~26.10.1
11.0.100-11.0.0-0ubuntu1~26.10.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/dotnet11to a version that resolves this vulnerability.Fixed in 11.0.100-11.0.0-0ubuntu1~26.10.1
Event History
Nov 10, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What must an attacker be able to do to exploit this issue?
The attacker can attempt exploitation over a network without prior privileges, but exploitation requires high attack complexity and user interaction.
2
Which Ubuntu software packages are identified as affected?
The affected software listed is ubuntu/dotnet7 and ubuntu/dotnet11.
3
What is the potential impact if exploitation succeeds?
Successful exploitation may allow an unauthorized attacker to bypass a security feature and could result in high confidentiality and integrity impact. No availability impact is indicated.