{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\ndotnet9.0:\n  * aspnetcore-runtime-9.0-9.0.15-1.hum1 (aarch64, x86_64)\n  * aspnetcore-runtime-dbg-9.0-9.0.15-1.hum1 (aarch64, x86_64)\n  * aspnetcore-targeting-pack-9.0-9.0.15-1.hum1 (aarch64, x86_64)\n  * dotnet-apphost-pack-9.0-9.0.15-1.hum1 (aarch64, x86_64)\n  * dotnet-hostfxr-9.0-9.0.15-1.hum1 (aarch64, x86_64)\n  * dotnet-runtime-9.0-9.0.15-1.hum1 (aarch64, x86_64)\n  * dotnet-runtime-dbg-9.0-9.0.15-1.hum1 (aarch64, x86_64)\n  * dotnet-sdk-9.0-9.0.116-1.hum1 (aarch64, x86_64)\n  * dotnet-sdk-9.0-source-built-artifacts-9.0.116-1.hum1 (aarch64, x86_64)\n  * dotnet-sdk-aot-9.0-9.0.116-1.hum1 (aarch64, x86_64)\n  * dotnet-sdk-dbg-9.0-9.0.116-1.hum1 (aarch64, x86_64)\n  * dotnet-targeting-pack-9.0-9.0.15-1.hum1 (aarch64, x86_64)\n  * dotnet-templates-9.0-9.0.116-1.hum1 (aarch64, x86_64)\n  * netstandard-targeting-pack-2.1-9.0.116-1.hum1 (aarch64, x86_64)\n  * dotnet9.0-9.0.116-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:9205",
        "url": "https://access.redhat.com/errata/RHSA-2026:9205"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-55315",
        "url": "https://access.redhat.com/security/cve/CVE-2025-55315"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-55248",
        "url": "https://access.redhat.com/security/cve/CVE-2025-55248"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-55247",
        "url": "https://access.redhat.com/security/cve/CVE-2025-55247"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-26646",
        "url": "https://access.redhat.com/security/cve/CVE-2025-26646"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32178",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32178"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-33116",
        "url": "https://access.redhat.com/security/cve/CVE-2026-33116"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-32203",
        "url": "https://access.redhat.com/security/cve/CVE-2026-32203"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-26171",
        "url": "https://access.redhat.com/security/cve/CVE-2026-26171"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9205.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-06-30T04:29:53+00:00",
      "generator": {
        "date": "2026-06-30T04:29:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "RHSA-2026:9205",
      "initial_release_date": "2026-04-21T03:04:46+00:00",
      "revision_history": [
        {
          "date": "2026-04-21T03:04:46+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-04-27T12:08:12+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-30T04:29:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet9-0-main@aarch64",
                "product": {
                  "name": "dotnet9-0-main@aarch64",
                  "product_id": "dotnet9-0-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.15-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet9-0-main@x86_64",
                "product": {
                  "name": "dotnet9-0-main@x86_64",
                  "product_id": "dotnet9-0-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/aspnetcore-runtime-9.0@9.0.15-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dotnet9-0-main@src",
                "product": {
                  "name": "dotnet9-0-main@src",
                  "product_id": "dotnet9-0-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/dotnet9.0@9.0.116-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet9-0-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet9-0-main@aarch64"
        },
        "product_reference": "dotnet9-0-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet9-0-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet9-0-main@src"
        },
        "product_reference": "dotnet9-0-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dotnet9-0-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        },
        "product_reference": "dotnet9-0-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-26646",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "discovery_date": "2025-05-09T11:59:36.797000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2365317"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET and Visual Studio. This vulnerability allows an attacker to use specially crafted input to spoof trusted content or identities, potentially misleading users or systems. This issue requires user interaction and limited privileges but can lead to unauthorized actions or escalation due to incorrect identity or content validation handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET and Visual Studio Spoofing Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in .NET is Important because it allows spoofing of trusted identities or content through crafted input, exploiting weaknesses in validation logic. While it requires user interaction and limited privileges, it can subvert authentication flows or integrity checks, leading to unauthorized actions. In security-sensitive contexts\u2014like signed assembly loading, secure package feeds, or automated build systems\u2014such spoofing can compromise trust boundaries and facilitate privilege escalation or supply chain attacks, making it more severe than a typical moderate flaw.\n\n```\n\n.NET 6.0 for RHEL-8, RHEL-9 and RHIVOS has reached its End of Life as of November 12, 2024, and is no longer supported. No fixes will be provided for this stream. For additional information about lifecycle for .NET on Red Hat Enterprise Linux, please refer to: https://access.redhat.com/support/policy/updates/net-core.\n\n```",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet9-0-main@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:dotnet9-0-main@aarch64",
          "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-26646"
        },
        {
          "category": "external",
          "summary": "RHBZ#2365317",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2365317"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-26646",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-26646"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-26646",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26646"
        },
        {
          "category": "external",
          "summary": "https://github.com/dotnet/announcements/issues/356",
          "url": "https://github.com/dotnet/announcements/issues/356"
        }
      ],
      "release_date": "2025-05-14T03:06:48.901000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T03:04:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9205"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: .NET and Visual Studio Spoofing Vulnerability"
    },
    {
      "cve": "CVE-2025-55247",
      "cwe": {
        "id": "CWE-377",
        "name": "Insecure Temporary File"
      },
      "discovery_date": "2025-10-10T13:25:49.702000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2403086"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in MSBuild\u2019s temporary directory handling on Linux where predictable, non-randomized temporary paths are used. Local users can create or manipulate those paths before MSBuild runs, causing build failures or unexpected behavior and resulting in denial of service for build operations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed this issue as Moderate. Predictable MSBuild temporary directory paths on Linux allow a local user to precreate or manipulate build temp directories, causing build failures (denial of service) on shared build hosts or CI runners using the affected .NET packages.\n\n```\n\n.NET 6.0 for RHEL-8, RHEL-9 and RHIVOS has reached its End of Life as of November 12, 2024, and is no longer supported. No fixes will be provided for this stream. For additional information about lifecycle for .NET on Red Hat Enterprise Linux, please refer to: https://access.redhat.com/support/policy/updates/net-core.\n\n```",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet9-0-main@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:dotnet9-0-main@aarch64",
          "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55247"
        },
        {
          "category": "external",
          "summary": "RHBZ#2403086",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2403086"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55247",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55247"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55247",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55247"
        }
      ],
      "release_date": "2025-10-15T13:06:53.521000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T03:04:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9205"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "dotnet: .NET Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2025-55248",
      "cwe": {
        "id": "CWE-319",
        "name": "Cleartext Transmission of Sensitive Information"
      },
      "discovery_date": "2025-10-10T13:00:27.907000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2403083"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw exists in certain .NET builds  where a man-in-the-middle (MITM) attacker can prevent or downgrade TLS between a client and an SMTP server. This may cause the client to send credentials or message data over an unencrypted connection, exposing sensitive information to the attacker.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET Information Disclosure Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as High, given that it can be remotely exploited by a man-in-the-middle attacker without authentication or user interaction. Successful exploitation allows an attacker to disable TLS protection between a .NET client and an SMTP server, leading to exposure of credentials and message contents over an unencrypted connection. The vulnerability results from insufficient enforcement of TLS during SMTP session negotiation in the affected .NET runtime.\n\n```\n\n.NET 6.0 for RHEL-8, RHEL-9 and RHIVOS has reached its End of Life as of November 12, 2024, and is no longer supported. No fixes will be provided for this stream. For additional information about lifecycle for .NET on Red Hat Enterprise Linux, please refer to: https://access.redhat.com/support/policy/updates/net-core\u201d\n\n```",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet9-0-main@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:dotnet9-0-main@aarch64",
          "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55248"
        },
        {
          "category": "external",
          "summary": "RHBZ#2403083",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2403083"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55248",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55248"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55248",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55248"
        }
      ],
      "release_date": "2025-10-15T12:39:35.343000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T03:04:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9205"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: .NET Information Disclosure Vulnerability"
    },
    {
      "cve": "CVE-2025-55315",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2025-10-10T13:21:09.125000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2403085"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in ASP.NET Core\u2019s HTTP request handling that leads to inconsistent interpretation of specially crafted HTTP requests. This mismatch can be abused by an authorized network attacker to smuggle or manipulate request boundaries, allowing bypass of security controls or unintended forwarding of request data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET Security Feature Bypass Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed this issue as Important. An authorized network attacker can exploit inconsistent HTTP request parsing in ASP.NET Core to bypass security controls (HTTP request smuggling), potentially exposing or enabling unauthorized actions on request data in affected .NET runtimes.\n\n```\n\n.NET 6.0 for RHEL-8, RHEL-9 and RHIVOS has reached its End of Life as of November 12, 2024, and is no longer supported. No fixes will be provided for this stream. For additional information about lifecycle for .NET on Red Hat Enterprise Linux, please refer to: https://access.redhat.com/support/policy/updates/net-core.\n\n```",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet9-0-main@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:dotnet9-0-main@aarch64",
          "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-55315"
        },
        {
          "category": "external",
          "summary": "RHBZ#2403085",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2403085"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-55315",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-55315"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-55315",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55315"
        }
      ],
      "release_date": "2025-10-15T12:58:31.281000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T03:04:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9205"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: .NET Security Feature Bypass Vulnerability"
    },
    {
      "cve": "CVE-2026-26171",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-04-13T05:00:07.414000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457739"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. A remote attacker could exploit a vulnerability related to unsafe transforms in EncryptedXml. This could lead to a Denial of Service (DoS), making the service unavailable, and a bypass of security features.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET: Security Bypass and Denial of Service Vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important impact vulnerability affecting .NET applications that utilize `EncryptedXml` for data encryption. An attacker could exploit unsafe transforms to achieve a denial of service or bypass security features. This impacts Red Hat Enterprise Linux and Fedora systems running affected .NET versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet9-0-main@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:dotnet9-0-main@aarch64",
          "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-26171"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457739",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457739"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-26171",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-26171"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26171",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26171"
        }
      ],
      "release_date": "2026-04-14T18:39:18.599000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T03:04:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9205"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: .NET: Security Bypass and Denial of Service Vulnerability"
    },
    {
      "cve": "CVE-2026-32178",
      "cwe": {
        "id": "CWE-138",
        "name": "Improper Neutralization of Special Elements"
      },
      "discovery_date": "2026-04-13T08:04:44.681000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457781"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the .NET runtime (System.Net.Mail) in how email address data is parsed. Improper neutralization of special characters, specifically carriage return and line feed (CR/LF) sequences, may allow specially crafted email address input to be interpreted incorrectly. An attacker could exploit this issue to perform email spoofing by injecting additional headers or altering how the email address is processed during SMTP operations",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in the .NET runtime\u0027s System.Net.Mail component affects Red Hat Enterprise Linux and Red Hat Hardened Images. Improper neutralization of carriage return and line feed sequences during email address parsing can lead to SMTP command or header injection, enabling email spoofing in applications utilizing the affected .NET versions for SMTP operations.\n\nThe impact is primarily related to how email data is handled and interpreted. By injecting crafted header content, an attacker may influence the structure of email messages and potentially expose sensitive information included in those messages to unintended recipients.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet9-0-main@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:dotnet9-0-main@aarch64",
          "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32178"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457781",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457781"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32178",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32178"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32178",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32178"
        }
      ],
      "release_date": "2026-04-14T18:41:05.485000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T03:04:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9205"
        },
        {
          "category": "workaround",
          "details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: Dotnet: SMTP Command Injection and Header Injection via MailAddress parsing flaw"
    },
    {
      "cve": "CVE-2026-32203",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-04-13T05:02:08.475000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457740"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. A remote attacker could exploit a stack overflow vulnerability during encrypted key nested decryption, leading to a Denial of Service (DoS). This could make the affected system unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET: Denial of Service via stack overflow",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in .NET, affecting Red Hat Enterprise Linux and Fedora. The flaw, a stack overflow in EncryptedKey nested decryption, could allow an attacker to cause a denial of service.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet9-0-main@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:dotnet9-0-main@aarch64",
          "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-32203"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457740",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457740"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-32203",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-32203"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32203",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32203"
        }
      ],
      "release_date": "2026-04-14T18:39:07.491000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T03:04:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9205"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: .NET: Denial of Service via stack overflow"
    },
    {
      "cve": "CVE-2026-33116",
      "cwe": {
        "id": "CWE-776",
        "name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
      },
      "discovery_date": "2026-04-13T05:12:13.834000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457741"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in .NET. A remote attacker could exploit this vulnerability by crafting a malicious XML document that triggers an infinite recursion within the XmlDecryptionTransform component. This could lead to a Denial of Service (DoS), making the affected system unresponsive.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in .NET\u0027s XmlDecryptionTransform. An attacker could exploit this flaw by providing specially crafted XML data, leading to an infinite recursion and causing a denial of service in applications processing such data. This affects Red Hat Enterprise Linux versions 8, 9, and 10, as well as Fedora.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:dotnet9-0-main@src"
        ],
        "known_not_affected": [
          "Red Hat Hardened Images:dotnet9-0-main@aarch64",
          "Red Hat Hardened Images:dotnet9-0-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-33116"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457741",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457741"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33116",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-33116"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33116",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33116"
        }
      ],
      "release_date": "2026-04-14T18:38:58.320000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-04-21T03:04:46+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@src"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:9205"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:dotnet9-0-main@aarch64",
            "Red Hat Hardened Images:dotnet9-0-main@src",
            "Red Hat Hardened Images:dotnet9-0-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "dotnet: .NET: Denial of Service via Infinite Recursion in XmlDecryptionTransform"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Microsoft Visual Studio ist eine integrierte Entwicklungsumgebung f\u00fcr Hochsprachen.\r\nMicrosoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausf\u00fchrung von Softwareanwendungen und Webdiensten erm\u00f6glicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. f\u00fcr die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere.\r\nMicrosoft .NET ist ein Software-Framework f\u00fcr die Entwicklung und Ausf\u00fchrung von Anwendungen.\r\nPowerShell ist ein plattform\u00fcbergreifendes Framework von Microsoft zur Automatisierung, Konfiguration und Verwaltung von Systemen, das einen Kommandozeileninterpreter inklusive Skriptsprache bietet. \r\nVisual Studio Code ist ein Quelltext-Editor von Microsoft.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio, Microsoft .NET Framework, Microsoft .NET, Microsoft PowerShell und Microsoft Visual Studio Code ausnutzen, um vertrauliche Informationen offenzulegen, Spoofing-Angriffe durchzuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren oder Sicherheitsma\u00dfnahmen zu umgehen, was m\u00f6glicherweise die Ausf\u00fchrung von beliebigem Code erm\u00f6glicht.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- MacOS X\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1100 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1100.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1100 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1100"
      },
      {
        "category": "external",
        "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates",
        "url": "https://msrc.microsoft.com/update-guide/"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8471 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8471"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8470 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8470"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8469 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8469"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8468 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8468"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8467 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8467"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-8176-1 vom 2026-04-16",
        "url": "https://ubuntu.com/security/notices/USN-8176-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8475 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8475"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8474 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8474"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8473 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8473"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:8472 vom 2026-04-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:8472"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8470 vom 2026-04-17",
        "url": "https://linux.oracle.com/errata/ELSA-2026-8470.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8472 vom 2026-04-17",
        "url": "https://linux.oracle.com/errata/ELSA-2026-8472.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8467 vom 2026-04-17",
        "url": "https://linux.oracle.com/errata/ELSA-2026-8467.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8474 vom 2026-04-17",
        "url": "https://linux.oracle.com/errata/ELSA-2026-8474.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8471 vom 2026-04-17",
        "url": "https://linux.oracle.com/errata/ELSA-2026-8471.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8473 vom 2026-04-19",
        "url": "http://linux.oracle.com/errata/ELSA-2026-8473.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8471 vom 2026-04-19",
        "url": "https://errata.build.resf.org/RLSA-2026:8471"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8470 vom 2026-04-18",
        "url": "https://errata.build.resf.org/RLSA-2026:8470"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8469 vom 2026-04-19",
        "url": "https://errata.build.resf.org/RLSA-2026:8469"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8473 vom 2026-04-18",
        "url": "https://errata.build.resf.org/RLSA-2026:8473"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8467 vom 2026-04-18",
        "url": "https://errata.build.resf.org/RLSA-2026:8467"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8468 vom 2026-04-18",
        "url": "https://errata.build.resf.org/RLSA-2026:8468"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8472 vom 2026-04-18",
        "url": "https://errata.build.resf.org/RLSA-2026:8472"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8474 vom 2026-04-19",
        "url": "https://errata.build.resf.org/RLSA-2026:8474"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:8475 vom 2026-04-18",
        "url": "https://errata.build.resf.org/RLSA-2026:8475"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8475 vom 2026-04-19",
        "url": "http://linux.oracle.com/errata/ELSA-2026-8475.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8468 vom 2026-04-20",
        "url": "https://linux.oracle.com/errata/ELSA-2026-8468.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-8469 vom 2026-04-20",
        "url": "https://linux.oracle.com/errata/ELSA-2026-8469.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-A1302C450C vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-a1302c450c"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-AC43E01AF9 vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-ac43e01af9"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-AD17A2DB6C vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-ad17a2db6c"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-E1D2833798 vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-e1d2833798"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-EADD724963 vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-eadd724963"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-EDCA75E401 vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-edca75e401"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-FC2112CDD4 vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-fc2112cdd4"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-02B2A30C02 vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-02b2a30c02"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-97FBAAEF10 vom 2026-04-21",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-97fbaaef10"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:9077 vom 2026-04-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:9077"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-8216-1 vom 2026-04-28",
        "url": "https://ubuntu.com/security/notices/USN-8216-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:13283 vom 2026-05-04",
        "url": "https://access.redhat.com/errata/RHSA-2026:13283"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:13281 vom 2026-05-04",
        "url": "https://access.redhat.com/errata/RHSA-2026:13281"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:13280 vom 2026-05-04",
        "url": "https://access.redhat.com/errata/RHSA-2026:13280"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:13282 vom 2026-05-04",
        "url": "https://access.redhat.com/errata/RHSA-2026:13282"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:13693 vom 2026-05-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:13693"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2026-311 vom 2026-05-27",
        "url": "https://www.hitachi.com/products/it/storage-solutions/sec_info/2026/04.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Microsoft DeveloperTools: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-05-26T22:00:00.000+00:00",
      "generator": {
        "date": "2026-05-27T08:52:42.319+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-1100",
      "initial_release_date": "2026-04-14T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-04-14T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-04-15T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2026-22991"
        },
        {
          "date": "2026-04-16T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Red Hat und Ubuntu aufgenommen"
        },
        {
          "date": "2026-04-19T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-04-20T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-04-21T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2026-04-27T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-04-28T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2026-05-03T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-04T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-26T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von HITACHI aufgenommen"
        }
      ],
      "status": "final",
      "version": "11"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "5100",
                "product": {
                  "name": "Hitachi Virtual Storage Platform 5100",
                  "product_id": "T017180",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hitachi:virtual_storage_platform:5100"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5500",
                "product": {
                  "name": "Hitachi Virtual Storage Platform 5500",
                  "product_id": "T017181",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hitachi:virtual_storage_platform:5500"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5100H",
                "product": {
                  "name": "Hitachi Virtual Storage Platform 5100H",
                  "product_id": "T017182",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hitachi:virtual_storage_platform:5100h"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5500H",
                "product": {
                  "name": "Hitachi Virtual Storage Platform 5500H",
                  "product_id": "T017183",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hitachi:virtual_storage_platform:5500h"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5200",
                "product": {
                  "name": "Hitachi Virtual Storage Platform 5200",
                  "product_id": "T047075",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hitachi:virtual_storage_platform:5200"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5200H",
                "product": {
                  "name": "Hitachi Virtual Storage Platform 5200H",
                  "product_id": "T047076",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hitachi:virtual_storage_platform:5200h"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5600",
                "product": {
                  "name": "Hitachi Virtual Storage Platform 5600",
                  "product_id": "T047077",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hitachi:virtual_storage_platform:5600"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5600H",
                "product": {
                  "name": "Hitachi Virtual Storage Platform 5600H",
                  "product_id": "T047078",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:hitachi:virtual_storage_platform:5600h"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Virtual Storage Platform"
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "10",
                "product": {
                  "name": "Microsoft .NET 10.0",
                  "product_id": "T051615",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net:10.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "9",
                "product": {
                  "name": "Microsoft .NET 9.0",
                  "product_id": "T051616",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net:9.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8",
                "product": {
                  "name": "Microsoft .NET 8.0",
                  "product_id": "T052749",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net:8.0"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": ".NET"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "4.8.1",
                "product": {
                  "name": "Microsoft .NET Framework 4.8.1",
                  "product_id": "1273212",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.8.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "4.7.2",
                "product": {
                  "name": "Microsoft .NET Framework 4.7.2",
                  "product_id": "432556",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.7.2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "4.8",
                "product": {
                  "name": "Microsoft .NET Framework 4.8",
                  "product_id": "432557",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:4.8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "3.5",
                "product": {
                  "name": "Microsoft .NET Framework 3.5",
                  "product_id": "834793",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:.net_framework:3.5:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": ".NET Framework"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "7.4",
                "product": {
                  "name": "Microsoft PowerShell 7.4",
                  "product_id": "1809886",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:powershell:7.4:rc1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.5",
                "product": {
                  "name": "Microsoft PowerShell 7.5",
                  "product_id": "T052775",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:powershell:7.5"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "PowerShell"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "version 15.9 (includes 15.0-15.8)",
                "product": {
                  "name": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0-15.8)",
                  "product_id": "T052756"
                }
              }
            ],
            "category": "product_name",
            "name": "Visual Studio 2017"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "version 16.11 (includes 16.0-16.10)",
                "product": {
                  "name": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0-16.10)",
                  "product_id": "T052786"
                }
              },
              {
                "category": "product_version_range",
                "name": "version 16.4 (includes 16.0-16.3)",
                "product": {
                  "name": "Microsoft Visual Studio 2019 version 16.4 (includes 16.0-16.3)",
                  "product_id": "T052787"
                }
              }
            ],
            "category": "product_name",
            "name": "Visual Studio 2019"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "version 17.14",
                "product": {
                  "name": "Microsoft Visual Studio 2022 version 17.14",
                  "product_id": "T052777"
                }
              },
              {
                "category": "product_version_range",
                "name": "version 17.12",
                "product": {
                  "name": "Microsoft Visual Studio 2022 version 17.12",
                  "product_id": "T052778"
                }
              }
            ],
            "category": "product_name",
            "name": "Visual Studio 2022"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "CoPilot Chat Extension",
                "product": {
                  "name": "Microsoft Visual Studio Code CoPilot Chat Extension",
                  "product_id": "T052776",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:microsoft:visual_studio_code:copilot_chat_extension"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Visual Studio Code"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-21637",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-21637"
    },
    {
      "cve": "CVE-2026-23653",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23653"
    },
    {
      "cve": "CVE-2026-23666",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23666"
    },
    {
      "cve": "CVE-2026-26143",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-26143"
    },
    {
      "cve": "CVE-2026-26171",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-26171"
    },
    {
      "cve": "CVE-2026-32178",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-32178"
    },
    {
      "cve": "CVE-2026-32203",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-32203"
    },
    {
      "cve": "CVE-2026-32226",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-32226"
    },
    {
      "cve": "CVE-2026-32631",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-32631"
    },
    {
      "cve": "CVE-2026-33116",
      "product_status": {
        "known_affected": [
          "432556",
          "67646",
          "432557",
          "T052777",
          "T052756",
          "T052778",
          "T052775",
          "T052776",
          "T004914",
          "T051615",
          "T051616",
          "T052749",
          "1809886",
          "T047075",
          "T017180",
          "T017181",
          "T017182",
          "T017183",
          "T052786",
          "T052787",
          "T032255",
          "74185",
          "834793",
          "1273212",
          "T000126",
          "T047078",
          "T047076",
          "T047077"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-33116"
    }
  ]
}