UBUNTU-CVE-2026-118749: High severity ubuntu/dotnet7 vulnerability
Published Nov 10, 2026
·Updated
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected Software
2 affected componentsFixes available
ubuntu/dotnet7*
ubuntu/dotnet11<11.0.100-11.0.0-0ubuntu1~26.10.1
11.0.100-11.0.0-0ubuntu1~26.10.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/dotnet11to a version that resolves this vulnerability.Fixed in 11.0.100-11.0.0-0ubuntu1~26.10.1
Event History
Nov 10, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
No authentication or user interaction is required. The attack can be performed remotely over a network.
2
What is the likely impact of successful exploitation?
Successful exploitation can cause a denial of service. The provided impact information indicates availability is affected, while confidentiality and integrity are not.
3
Which Ubuntu software packages are identified as affected?
The affected software listed is ubuntu/dotnet7 and ubuntu/dotnet11.