CYBER CODE RED

Get real-time updates on Telegram

osv:ALSA-2026:86170: aspnetcore-runtime-9.0 (exact versions not specified); +13 more affected products

Critical: .NET 9.0 security, bug fix, and enhancement update. Fixed version: 9.0.21-1.el8_10. Fixed version: 9.0.21-1.el8_10. Fixed version: 9.0.21-1.el8_10. Fixed version: 9.0.21-1.el8_10. Fixed version: 9.0.21-1.el8_10. Fixed version: 9.0.21-1.el8_10. Fixed version: 9.0.21-1.el8_10. Fixed version: 9.0.122-1.el8_10. Fixed version: 9.0.122-1.el8_10. Fixed version: 9.0.122-1.el8_10. Fixed version: 9.0.122-1.el8_10. Fixed version: 9.0.21-1.el8_10. Fixed version: 9.0.122-1.el8_10. Fixed version: 9.0.122-1.el8_10.

Affected technology

aspnetcore-runtime-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

aspnetcore-runtime-dbg-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

aspnetcore-targeting-pack-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-apphost-pack-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-hostfxr-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-runtime-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-runtime-dbg-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-sdk-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-sdk-9.0-source-built-artifacts · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-sdk-aot-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-sdk-dbg-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-targeting-pack-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

dotnet-templates-9.0 · Exact affected versions not specified by the source
Vendor not specified by the source

netstandard-targeting-pack-2.1 · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source reports that an attacker could run code remotely and disrupt service and access information they should not be able to access.

Published

Product
aspnetcore-runtime-9.0
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/adv-osv-alsa-2026-86170.html