CVE-2026-118746

Vendor

Microsoft

Product

.NET 11.0 installed on Linux, .NET 11.0 installed on Mac OS

CVSS v3.1

6.8 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Weakness

CWE-636

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 29
   Advisory MSRC 3h ago

   .NET Security Feature Bypass Vulnerability

   Changes made to the security updates links and information. This is an informational change only.

   CVE-2026-118746 Microsoft
2. 18
   CVE NVD 24h ago

   Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.

   Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.

   CVSS 6.8 CVE-2026-118746 Microsoft