CVE-2026-26131

Updated on 10 Mar 2026

Severity

7.8 High severity

Details

CVSS score
7.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Overview

About vulnerability

Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.

Details

Affected product:
Debian 12 , Debian 13
Affected packages:
dotnet @ 7.0 (+1 more)
Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.