CVE catalog

CVE-2026-70194

UBUNTU-CVE-2026-70194

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.49% · Oct 25, 2026

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntudotnet722.047.0.105-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.107-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.108-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.109-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.110-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.111-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.112-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.113-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.114-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.115-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.116-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.117-0ubuntu1~22.04.1vulnerable
Ubuntudotnet722.047.0.117-0ubuntu1~22.04.2vulnerable
Ubuntudotnet722.047.0.119-0ubuntu1~22.04.1vulnerable
Ubuntudotnet1126.1011.0.100-11.0.0~rc1-0ubuntu1vulnerable
Ubuntudotnet1126.1011.0.100-11.0.0~rc2-0ubuntu1~26.10.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntudotnet11deb26.1011.0.100-11.0.0~rc2-0ubuntu1~26.10.1Not reportedUBUNTU-CVE-2026-70194Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]