CVE-2026-32178 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 81%

Affected Products (NVD)

Vendor	Product	Version
microsoft	.net	10.0.0 ≤ 𝑥 < 10.0.6
microsoft	.net	8.0.0 ≤ 𝑥 < 8.0.26
microsoft	.net	9.0.0 ≤ 𝑥 < 9.0.15
microsoft	visual_studio_2022	17.12.0 ≤ 𝑥 < 17.12.19
microsoft	visual_studio_2022	17.14.0 ≤ 𝑥 < 17.14.30

𝑥

= Vulnerable software versions

Red Hat Enterprise Linux Releases

Red Hat Product

Release

aspnetcore-runtime-10.0

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

aspnetcore-runtime-8.0

RHEL 8	0:8.0.26-1.el8_10 fixed
RHEL 9	0:8.0.26-1.el9_7 fixed

aspnetcore-runtime-9.0

RHEL 8	0:9.0.15-1.el8_10 fixed
RHEL 9	0:9.0.15-1.el9_7 fixed

aspnetcore-runtime-dbg-10.0

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

aspnetcore-runtime-dbg-8.0

RHEL 8	0:8.0.26-1.el8_10 fixed
RHEL 9	0:8.0.26-1.el9_7 fixed

aspnetcore-runtime-dbg-9.0

RHEL 8	0:9.0.15-1.el8_10 fixed
RHEL 9	0:9.0.15-1.el9_7 fixed

aspnetcore-targeting-pack-10.0

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

aspnetcore-targeting-pack-8.0

RHEL 8	0:8.0.26-1.el8_10 fixed
RHEL 9	0:8.0.26-1.el9_7 fixed

aspnetcore-targeting-pack-9.0

RHEL 8	0:9.0.15-1.el8_10 fixed
RHEL 9	0:9.0.15-1.el9_7 fixed

dotnet

RHEL 8

0:10.0.106-1.el8_10

fixed

dotnet-apphost-pack-10.0

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

dotnet-apphost-pack-8.0

RHEL 8	0:8.0.26-1.el8_10 fixed
RHEL 9	0:8.0.26-1.el9_7 fixed

dotnet-apphost-pack-9.0

RHEL 8	0:9.0.15-1.el8_10 fixed
RHEL 9	0:9.0.15-1.el9_7 fixed

dotnet-host

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

dotnet-hostfxr-10.0

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

dotnet-hostfxr-8.0

RHEL 8	0:8.0.26-1.el8_10 fixed
RHEL 9	0:8.0.26-1.el9_7 fixed

dotnet-hostfxr-9.0

RHEL 8	0:9.0.15-1.el8_10 fixed
RHEL 9	0:9.0.15-1.el9_7 fixed

dotnet-runtime-10.0

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

dotnet-runtime-8.0

RHEL 8	0:8.0.26-1.el8_10 fixed
RHEL 9	0:8.0.26-1.el9_7 fixed

dotnet-runtime-9.0

RHEL 8	0:9.0.15-1.el8_10 fixed
RHEL 9	0:9.0.15-1.el9_7 fixed

dotnet-runtime-dbg-10.0

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

dotnet-runtime-dbg-8.0

RHEL 8	0:8.0.26-1.el8_10 fixed
RHEL 9	0:8.0.26-1.el9_7 fixed

dotnet-runtime-dbg-9.0

RHEL 8	0:9.0.15-1.el8_10 fixed
RHEL 9	0:9.0.15-1.el9_7 fixed

dotnet-sdk-10.0

RHEL 8	0:10.0.106-1.el8_10 fixed
RHEL 9	0:10.0.106-1.el9_7 fixed

dotnet-sdk-10.0-source-built-artifacts

RHEL 8	0:10.0.106-1.el8_10 fixed
RHEL 9	0:10.0.106-1.el9_7 fixed

dotnet-sdk-8.0

RHEL 8	0:8.0.126-1.el8_10 fixed
RHEL 9	0:8.0.126-1.el9_7 fixed

dotnet-sdk-8.0-source-built-artifacts

RHEL 8	0:8.0.126-1.el8_10 fixed
RHEL 9	0:8.0.126-1.el9_7 fixed

dotnet-sdk-9.0

RHEL 8	0:9.0.116-1.el8_10 fixed
RHEL 9	0:9.0.116-1.el9_7 fixed

dotnet-sdk-9.0-source-built-artifacts

RHEL 8	0:9.0.116-1.el8_10 fixed
RHEL 9	0:9.0.116-1.el9_7 fixed

dotnet-sdk-aot-10.0

RHEL 8	0:10.0.106-1.el8_10 fixed
RHEL 9	0:10.0.106-1.el9_7 fixed

dotnet-sdk-aot-9.0

RHEL 8	0:9.0.116-1.el8_10 fixed
RHEL 9	0:9.0.116-1.el9_7 fixed

dotnet-sdk-dbg-10.0

RHEL 8	0:10.0.106-1.el8_10 fixed
RHEL 9	0:10.0.106-1.el9_7 fixed

dotnet-sdk-dbg-8.0

RHEL 8	0:8.0.126-1.el8_10 fixed
RHEL 9	0:8.0.126-1.el9_7 fixed

dotnet-sdk-dbg-9.0

RHEL 8	0:9.0.116-1.el8_10 fixed
RHEL 9	0:9.0.116-1.el9_7 fixed

dotnet-targeting-pack-10.0

RHEL 8	0:10.0.6-1.el8_10 fixed
RHEL 9	0:10.0.6-1.el9_7 fixed

dotnet-targeting-pack-8.0

RHEL 8	0:8.0.26-1.el8_10 fixed
RHEL 9	0:8.0.26-1.el9_7 fixed

dotnet-targeting-pack-9.0

RHEL 8	0:9.0.15-1.el8_10 fixed
RHEL 9	0:9.0.15-1.el9_7 fixed

dotnet-templates-10.0

RHEL 8	0:10.0.106-1.el8_10 fixed
RHEL 9	0:10.0.106-1.el9_7 fixed

dotnet-templates-8.0

RHEL 8	0:8.0.126-1.el8_10 fixed
RHEL 9	0:8.0.126-1.el9_7 fixed

dotnet-templates-9.0

RHEL 8	0:9.0.116-1.el8_10 fixed
RHEL 9	0:9.0.116-1.el9_7 fixed

netstandard-targeting-pack-2.1

RHEL 8	0:9.0.116-1.el8_10 fixed
RHEL 9	0:9.0.116-1.el9_7 fixed

Amazon Linux Releases

Amazon Package

Release

aspnetcore-runtime-10.0

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

aspnetcore-runtime-8.0

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

aspnetcore-runtime-9.0

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

aspnetcore-runtime-dbg-10.0

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

aspnetcore-runtime-dbg-8.0

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

aspnetcore-runtime-dbg-9.0

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

aspnetcore-targeting-pack-10.0

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

aspnetcore-targeting-pack-8.0

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

aspnetcore-targeting-pack-9.0

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

dotnet-apphost-pack-10.0

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

dotnet-apphost-pack-10.0-debuginfo

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

dotnet-apphost-pack-8.0

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-apphost-pack-8.0-debuginfo

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-apphost-pack-9.0

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet-apphost-pack-9.0-debuginfo

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet-host

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-host-debuginfo

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-hostfxr-10.0

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

dotnet-hostfxr-10.0-debuginfo

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

dotnet-hostfxr-8.0

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-hostfxr-8.0-debuginfo

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-hostfxr-9.0

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet-hostfxr-9.0-debuginfo

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet-runtime-10.0

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

dotnet-runtime-10.0-debuginfo

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

dotnet-runtime-8.0

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-runtime-8.0-debuginfo

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-runtime-9.0

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet-runtime-9.0-debuginfo

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet-runtime-dbg-10.0

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

dotnet-runtime-dbg-8.0

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-runtime-dbg-9.0

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet-sdk-10.0

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet-sdk-10.0-debuginfo

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet-sdk-10.0-source-built-artifacts

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet-sdk-8.0

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

dotnet-sdk-8.0-debuginfo

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

dotnet-sdk-8.0-source-built-artifacts

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

dotnet-sdk-9.0

Amazon Linux 2023

0:9.0.116-1.amzn2023.0.1

fixed

dotnet-sdk-9.0-debuginfo

Amazon Linux 2023

0:9.0.116-1.amzn2023.0.1

fixed

dotnet-sdk-9.0-source-built-artifacts

Amazon Linux 2023

0:9.0.116-1.amzn2023.0.1

fixed

dotnet-sdk-aot-10.0

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet-sdk-aot-10.0-debuginfo

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet-sdk-aot-9.0

Amazon Linux 2023

0:9.0.116-1.amzn2023.0.1

fixed

dotnet-sdk-aot-9.0-debuginfo

Amazon Linux 2023

0:9.0.116-1.amzn2023.0.1

fixed

dotnet-sdk-dbg-10.0

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet-sdk-dbg-8.0

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

dotnet-sdk-dbg-9.0

Amazon Linux 2023

0:9.0.116-1.amzn2023.0.1

fixed

dotnet-targeting-pack-10.0

Amazon Linux 2023

0:10.0.6-1.amzn2023.0.1

fixed

dotnet-targeting-pack-8.0

Amazon Linux 2023

0:8.0.26-1.amzn2023.0.1

fixed

dotnet-targeting-pack-9.0

Amazon Linux 2023

0:9.0.15-1.amzn2023.0.1

fixed

dotnet-templates-10.0

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet-templates-8.0

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

dotnet-templates-9.0

Amazon Linux 2023

0:9.0.116-1.amzn2023.0.1

fixed

dotnet10.0-debuginfo

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet10.0-debugsource

Amazon Linux 2023

0:10.0.106-1.amzn2023.0.1

fixed

dotnet8.0-debuginfo

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

dotnet8.0-debugsource

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

dotnet9.0-debugsource

Amazon Linux 2023

0:9.0.116-1.amzn2023.0.1

fixed

netstandard-targeting-pack-2.1

Amazon Linux 2023

0:8.0.126-1.amzn2023.0.1

fixed

Common Weakness Enumeration

CWE-138 - Improper Neutralization of Special Elements
The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as control elements or syntactic markers when they are sent to a downstream component.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178

https://access.redhat.com/errata/RHSA-2026:13280

https://access.redhat.com/errata/RHSA-2026:13281

https://access.redhat.com/errata/RHSA-2026:13282

https://access.redhat.com/errata/RHSA-2026:13283

https://access.redhat.com/errata/RHSA-2026:13693

https://access.redhat.com/errata/RHSA-2026:8467

https://access.redhat.com/errata/RHSA-2026:8468

https://access.redhat.com/errata/RHSA-2026:8469

https://access.redhat.com/errata/RHSA-2026:8470

https://access.redhat.com/errata/RHSA-2026:8471

https://access.redhat.com/errata/RHSA-2026:8472

https://access.redhat.com/errata/RHSA-2026:8473

https://access.redhat.com/errata/RHSA-2026:8474

https://access.redhat.com/errata/RHSA-2026:8475

https://access.redhat.com/errata/RHSA-2026:9077

https://access.redhat.com/errata/RHSA-2026:9080

https://access.redhat.com/errata/RHSA-2026:9205

https://access.redhat.com/security/cve/CVE-2026-32178

https://bugzilla.redhat.com/show_bug.cgi?id=2457781

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32178.json