CVE catalog

CVE-2026-26171

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.75% · Oct 25, 2026

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Cpedotnet10Not reported10.0.106-10.0.6-0ubuntu1~24.04.1fixed
Cpedotnet8Not reported8.0.126-8.0.26-0ubuntu1~24.04.1fixed
Cpeaspnetcore-runtime-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpeaspnetcore-runtime-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpeaspnetcore-runtime-dbg-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpeaspnetcore-runtime-dbg-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpeaspnetcore-targeting-pack-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpeaspnetcore-targeting-pack-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpedotnet-apphost-pack-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpedotnet-apphost-pack-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpedotnet-host-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpedotnet-host-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpedotnet-hostfxr-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpedotnet-hostfxr-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpedotnet-runtime-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpedotnet-runtime-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpedotnet-runtime-dbg-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpedotnet-runtime-dbg-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpedotnet-sdk-10.0Not reported10.0.106-0ubuntu1~24.04.1fixed
Cpedotnet-sdk-10.0-source-built-artifactsNot reported10.0.106-0ubuntu1~24.04.1fixed
Cpedotnet-sdk-8.0Not reported8.0.126-0ubuntu1~24.04.1fixed
Cpedotnet-sdk-8.0-source-built-artifactsNot reported8.0.126-0ubuntu1~24.04.1fixed
Cpedotnet-sdk-aot-10.0Not reported10.0.106-0ubuntu1~24.04.1fixed
Cpedotnet-sdk-dbg-10.0Not reported10.0.106-0ubuntu1~24.04.1fixed
Cpedotnet-sdk-dbg-8.0Not reported8.0.126-0ubuntu1~24.04.1fixed
Cpedotnet-targeting-pack-10.0Not reported10.0.6-0ubuntu1~24.04.1fixed
Cpedotnet-targeting-pack-8.0Not reported8.0.26-0ubuntu1~24.04.1fixed
Cpedotnet-templates-10.0Not reported10.0.106-0ubuntu1~24.04.1fixed
Cpedotnet-templates-8.0Not reported8.0.126-0ubuntu1~24.04.1fixed
Cpenetstandard-targeting-pack-2.1-8.0Not reported8.0.126-0ubuntu1~24.04.1fixed
Cpe.netNot reported10.0.6fixed
Cpe.netNot reported8.0.26fixed
Cpe.netNot reported9.0.15fixed
CpepowershellNot reported7.5.6fixed
CpepowershellNot reported7.6.1fixed
Ubuntudotnet822.048.0.102-8.0.2-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.103-8.0.3-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.103-8.0.3-0ubuntu1~22.04.2vulnerable
Ubuntudotnet822.048.0.105-8.0.5-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.107-8.0.7-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.108-8.0.8-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.110-8.0.10-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.111-8.0.11-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.112-8.0.12-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.114-8.0.14-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.115-8.0.15-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.116-8.0.16-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.117-8.0.17-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.118-8.0.18-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.119-8.0.19-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.120-8.0.20-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.121-8.0.21-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.122-8.0.22-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.123-8.0.23-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.124-8.0.24-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.125-8.0.25-0ubuntu1~22.04.1vulnerable
Ubuntudotnet822.048.0.126-8.0.26-0ubuntu1~22.04.1fixed
Ubuntudotnet1024.0410.0.100-10.0.0-0ubuntu1~24.04.1vulnerable
Ubuntudotnet1024.0410.0.101-10.0.1-0ubuntu1~24.04.2vulnerable
Ubuntudotnet1024.0410.0.103-10.0.3-0ubuntu1~24.04.1vulnerable
Ubuntudotnet1024.0410.0.104-10.0.4-0ubuntu1~24.04.1vulnerable
Ubuntudotnet1024.0410.0.105-10.0.5-0ubuntu1~24.04.1vulnerable
Ubuntudotnet1024.0410.0.106-10.0.6-0ubuntu1~24.04.1fixed
Ubuntudotnet824.048.0.100-8.0.0~rc1-0ubuntu1vulnerable
Ubuntudotnet824.048.0.100-8.0.0~rc2-0ubuntu1vulnerable
Ubuntudotnet824.048.0.100-8.0.0~rc2-0ubuntu2vulnerable
Ubuntudotnet824.048.0.100-8.0.0-0ubuntu1vulnerable
Ubuntudotnet824.048.0.100-8.0.0-0ubuntu2vulnerable
Ubuntudotnet824.048.0.101-8.0.1-0ubuntu1vulnerable
Ubuntudotnet824.048.0.101-8.0.1-0ubuntu2vulnerable
Ubuntudotnet824.048.0.102-8.0.2-0ubuntu1vulnerable
Ubuntudotnet824.048.0.103-8.0.3-0ubuntu2vulnerable
Ubuntudotnet824.048.0.103-8.0.3-0ubuntu3vulnerable
Ubuntudotnet824.048.0.104-8.0.4-0ubuntu1vulnerable
Ubuntudotnet824.048.0.105-8.0.5-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.107-8.0.7-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.108-8.0.8-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.108-8.0.8-0ubuntu1~24.04.2vulnerable
Ubuntudotnet824.048.0.110-8.0.10-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.111-8.0.11-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.112-8.0.12-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.114-8.0.14-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.115-8.0.15-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.116-8.0.16-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.117-8.0.17-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.118-8.0.18-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.119-8.0.19-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.120-8.0.20-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.121-8.0.21-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.122-8.0.22-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.123-8.0.23-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.124-8.0.24-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.125-8.0.25-0ubuntu1~24.04.1vulnerable
Ubuntudotnet824.048.0.126-8.0.26-0ubuntu1~24.04.1fixed
Ubuntudotnet1025.1010.0.100-10.0.0~rc1-0ubuntu1vulnerable
Ubuntudotnet1025.1010.0.100-10.0.0~rc2-0ubuntu1~25.10.2vulnerable
Ubuntudotnet1025.1010.0.100-10.0.0-0ubuntu1~25.10.1vulnerable
Ubuntudotnet1025.1010.0.101-10.0.1-0ubuntu1~25.10.2vulnerable
Ubuntudotnet1025.1010.0.103-10.0.3-0ubuntu1~25.10.1vulnerable
Ubuntudotnet1025.1010.0.104-10.0.4-0ubuntu1~25.10.1vulnerable
Ubuntudotnet1025.1010.0.105-10.0.5-0ubuntu1~25.10.1vulnerable
Ubuntudotnet1025.1010.0.106-10.0.6-0ubuntu1~25.10.1fixed
Ubuntudotnet825.108.0.115-8.0.15-0ubuntu1vulnerable
Ubuntudotnet825.108.0.116-8.0.16-0ubuntu1vulnerable
Ubuntudotnet825.108.0.117-8.0.17-0ubuntu1vulnerable
Ubuntudotnet825.108.0.118-8.0.18-0ubuntu1vulnerable
Ubuntudotnet825.108.0.119-8.0.19-0ubuntu1vulnerable
Ubuntudotnet825.108.0.120-8.0.20-0ubuntu1vulnerable
Ubuntudotnet825.108.0.121-8.0.21-0ubuntu1~25.10.1vulnerable
Ubuntudotnet825.108.0.122-8.0.22-0ubuntu1~25.10.1vulnerable
Ubuntudotnet825.108.0.123-8.0.23-0ubuntu1~25.10.1vulnerable
Ubuntudotnet825.108.0.124-8.0.24-0ubuntu1~25.10.1vulnerable
Ubuntudotnet825.108.0.125-8.0.25-0ubuntu1~25.10.1vulnerable
Ubuntudotnet825.108.0.126-8.0.26-0ubuntu1~25.10.1fixed
Ubuntudotnet925.109.0.105-9.0.4-0ubuntu1vulnerable
Ubuntudotnet925.109.0.106-9.0.5-0ubuntu1vulnerable
Ubuntudotnet925.109.0.107-9.0.6-0ubuntu1vulnerable
Ubuntudotnet925.109.0.108-9.0.7-0ubuntu1vulnerable
Ubuntudotnet925.109.0.109-9.0.8-0ubuntu1vulnerable
Ubuntudotnet925.109.0.110-9.0.9-0ubuntu1vulnerable
Ubuntudotnet925.109.0.111-9.0.10-0ubuntu1~25.10.1vulnerable
Ubuntudotnet925.109.0.112-9.0.11-0ubuntu1~25.10.1vulnerable
Ubuntudotnet925.109.0.113-9.0.12-0ubuntu1~25.10.1vulnerable
Ubuntudotnet925.109.0.114-9.0.13-0ubuntu1~25.10.1vulnerable
Ubuntudotnet925.109.0.115-9.0.14-0ubuntu1~25.10.1vulnerable
Ubuntudotnet925.109.0.116-9.0.15-0ubuntu1~25.10.1fixed
Cpe.netNot reported9.0.15fixed
CpepowershellNot reported7.6.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Cpedotnet10cpeNot reported10.0.106-10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet8cpeNot reported8.0.126-8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpeaspnetcore-runtime-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpeaspnetcore-runtime-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpeaspnetcore-runtime-dbg-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpeaspnetcore-runtime-dbg-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpeaspnetcore-targeting-pack-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpeaspnetcore-targeting-pack-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-apphost-pack-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-apphost-pack-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-host-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-host-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-hostfxr-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-hostfxr-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-runtime-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-runtime-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-runtime-dbg-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-runtime-dbg-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-sdk-10.0cpeNot reported10.0.106-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-sdk-10.0-source-built-artifactscpeNot reported10.0.106-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-sdk-8.0cpeNot reported8.0.126-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-sdk-8.0-source-built-artifactscpeNot reported8.0.126-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-sdk-aot-10.0cpeNot reported10.0.106-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-sdk-dbg-10.0cpeNot reported10.0.106-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-sdk-dbg-8.0cpeNot reported8.0.126-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-targeting-pack-10.0cpeNot reported10.0.6-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-targeting-pack-8.0cpeNot reported8.0.26-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-templates-10.0cpeNot reported10.0.106-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpedotnet-templates-8.0cpeNot reported8.0.126-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpenetstandard-targeting-pack-2.1-8.0cpeNot reported8.0.126-0ubuntu1~24.04.1Not reportedNot reportedNot reported
Cpe.netcpeNot reported10.0.6Not reportedNot reportedNot reported
Cpe.netcpeNot reported8.0.26Not reportedNot reportedNot reported
Cpe.netcpeNot reported9.0.15Not reportedNot reportedNot reported
CpepowershellcpeNot reported7.5.6Not reportedNot reportedNot reported
CpepowershellcpeNot reported7.6.1Not reportedNot reportedNot reported
Ubuntudotnet8deb22.048.0.126-8.0.26-0ubuntu1~22.04.1Not reportedUSN-8176-1Not reported
Ubuntudotnet10deb24.0410.0.106-10.0.6-0ubuntu1~24.04.1Not reportedUSN-8176-1Not reported
Ubuntudotnet8deb24.048.0.126-8.0.26-0ubuntu1~24.04.1Not reportedUSN-8176-1Not reported
Ubuntudotnet10deb25.1010.0.106-10.0.6-0ubuntu1~25.10.1Not reportedUSN-8176-1Not reported
Ubuntudotnet8deb25.108.0.126-8.0.26-0ubuntu1~25.10.1Not reportedUSN-8176-1Not reported
Ubuntudotnet9deb25.109.0.116-9.0.15-0ubuntu1~25.10.1Not reportedUSN-8176-1Not reported
Cpe.netcpeNot reported9.0.15Not reportedNVD-CVE-2026-26171Not reported
CpepowershellcpeNot reported7.6.1Not reportedNVD-CVE-2026-26171Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]