CVE-2026-26171

HIGH

.NET Denial of Service Vulnerability

Title source: cna

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

CVSS v3 7.5

EPSS 0.0050

EPSS Percentile 66.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-400 CWE-611

Status published

Products (6)

Microsoft/.NET 10.0 10.0.0 - 10.0.6

Microsoft/.NET 8.0 8.0.0 - 8.0.26

Microsoft/.NET 9.0 9.0.0 - 9.0.15

Microsoft/PowerShell 7.5 7.5.0 - 7.5.6

Microsoft/PowerShell 7.6 7.6.0 - 7.6.1

nuget/System.Security.Cryptography.Xml 10.0.0 - 10.0.6NuGet

Published Apr 14, 2026

Tracked Since Apr 14, 2026