{"id":"CVE-2026-26171","title":".NET Denial of Service Vulnerability","summary":"Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","cvssSource":"cna","cwe":["CWE-400","CWE-611"],"vendor":"Microsoft","product":".NET 10.0","affected":[".net_10.0 >= 10.0.0 < 10.0.6",".net_8.0 >= 8.0.0 < 8.0.26",".net_9.0 >= 9.0.0 < 9.0.15","powershell_7.5 >= 7.5.0 < 7.5.6","powershell_7.6 >= 7.6.0 < 7.6.1"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-04-14T18:53:29.483401Z"},"published":"2026-04-14","updated":"2026-09-25","sourceUpdated":"2026-09-25T17:26:11.794Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-26171","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171","label":".NET Denial of Service Vulnerability"}],"tags":["cve.org"],"epss":0.02261,"epssPercentile":0.82267,"ingestedAt":"2026-09-25T18:14:20.417Z","slug":"CVE-2026-26171","body":"## Overview\n\nUncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.\n\n## Affected\n\n- `.net_10.0 >= 10.0.0 < 10.0.6`\n- `.net_8.0 >= 8.0.0 < 8.0.26`\n- `.net_9.0 >= 9.0.0 < 9.0.15`\n- `powershell_7.5 >= 7.5.0 < 7.5.6`\n- `powershell_7.6 >= 7.6.0 < 7.6.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":41.3,"likelihood":0.5,"exploitation":0,"ransomware":0},"changes":[]}