CVE-2026-118746

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-118746", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2026-10-28T19:08:23.388Z", "datePublished": "2026-11-10T18:21:51.731Z", "dateUpdated": "2026-11-12T21:49:03.151Z"}, "containers": {"cna": {"title": ".NET Security Feature Bypass Vulnerability", "datePublic": "2026-11-10T16:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0.0-preview.1", "versionEndExcluding": "11.0.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0.0-preview.1", "versionEndExcluding": "11.0.0"}]}]}], "affected": [{"vendor": "Microsoft", "product": ".NET 11.0 installed on Linux", "versions": [{"version": "11.0.0-preview.1", "lessThan": "11.0.0", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": ".NET 11.0 installed on Mac OS", "versions": [{"version": "11.0.0-preview.1", "lessThan": "11.0.0", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-636: Not Failing Securely ('Failing Open')", "lang": "en-US", "type": "CWE", "cweId": "CWE-636"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-11-12T21:49:03.151Z"}, "references": [{"name": ".NET Security Feature Bypass Vulnerability", "tags": ["vendor-advisory", "patch"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118746"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 6.8, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-118746", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-10T19:28:26.654209Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-10T19:38:35.467Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-118746", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2026-10-28T19:08:23.388Z", "datePublished": "2026-11-10T18:21:51.731Z", "dateUpdated": "2026-11-10T23:53:23.634Z"}, "containers": {"cna": {"title": ".NET Security Feature Bypass Vulnerability", "datePublic": "2026-11-10T16:00:00.000Z", "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0.0-preview.1", "versionEndExcluding": "11.0.0"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*", "versionStartIncluding": "11.0.0-preview.1", "versionEndExcluding": "11.0.0"}]}]}], "affected": [{"vendor": "Microsoft", "product": ".NET 11.0 installed on Linux", "versions": [{"version": "11.0.0-preview.1", "lessThan": "11.0.0", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": ".NET 11.0 installed on Mac OS", "versions": [{"version": "11.0.0-preview.1", "lessThan": "11.0.0", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-636: Not Failing Securely ('Failing Open')", "lang": "en-US", "type": "CWE", "cweId": "CWE-636"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2026-11-10T23:53:23.634Z"}, "references": [{"name": ".NET Security Feature Bypass Vulnerability", "tags": ["vendor-advisory", "patch"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118746"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 6.8, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C"}}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-118746", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-10T19:28:26.654209Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-10T19:28:29.807Z"}}]}}

{"affected": [{"affectedData": [{"product": ".NET 11.0 installed on Linux", "vendor": "Microsoft", "versions": [{"lessThan": "11.0.0", "status": "affected", "version": "11.0.0-preview.1", "versionType": "custom"}]}, {"product": ".NET 11.0 installed on Mac OS", "vendor": "Microsoft", "versions": [{"lessThan": "11.0.0", "status": "affected", "version": "11.0.0-preview.1", "versionType": "custom"}]}], "source": "secure@microsoft.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network."}], "id": "CVE-2026-118746", "lastModified": "2026-11-10T20:18:25.753", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.2, "source": "secure@microsoft.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-118746", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-10T19:28:26.654209Z", "version": "2.0.3"}}]}, "published": "2026-11-10T19:19:51.340", "references": [{"source": "secure@microsoft.com", "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118746"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-636"}], "source": "secure@microsoft.com", "type": "Secondary"}]}

{"bugzilla": {"description": "dotnet11.0: .NET Security Feature Bypass Vulnerability", "id": "2568453", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2568453"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C", "status": "draft"}, "cwe": "CWE-636", "details": ["Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.\nWhat kind of security feature could be bypassed by successfully exploiting this vulnerability?\nThe authentication feature could be bypassed as this vulnerability allows impersonation.\nAccording to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?\nThe attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack."], "name": "CVE-2026-118746", "package_state": [{"cpe": "cpe:/a:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "dotnet11.0", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/a:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "dotnet11.0", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "dotnet11.0", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-11-10T17:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-118746\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-118746"], "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[11.0.0-preview.1,11.0.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": ".NET 11.0 installed on Linux", "source": "cna", "vendor": "Microsoft"}, "product": ".net_11.0_installed_on_linux", "vendor": "microsoft"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[11.0.0-preview.1,11.0.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": ".NET 11.0 installed on Mac OS", "source": "cna", "vendor": "Microsoft"}, "product": ".net_11.0_installed_on_mac_os", "vendor": "microsoft"}], "created": "2026-11-12T03:45:21.915603+00:00", "updated": "2026-11-12T15:30:04.932141+00:00", "vendors": ["microsoft", "microsoft$PRODUCT$.net_11.0_installed_on_linux", "microsoft$PRODUCT$.net_11.0_installed_on_mac_os"]}