high7.5

CVE-2026-32178

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Impact

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

Ecosystem	Package	Affected	Fixed in
nuget	`Microsoft.NetCore.App.Runtime.linux-arm`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.linux-musl-arm`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.linux-arm64`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.linux-musl-x64`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.linux-musl-arm64`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.linux-x64`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.osx-arm64`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.osx-x64`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.win-arm`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.win-arm64`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.win-x64`	>= 10.0.0, <= 10.0.5	10.0.6
nuget	`Microsoft.NetCore.App.Runtime.win-x86`	>= 10.0.0, <= 10.0.5	10.0.6

Vendor	Product	Affected versions
Microsoft	.Net	from 10.0.0 before 10.0.6 from 8.0.0 before 8.0.26 from 9.0.0 before 9.0.15
Microsoft	Visual Studio 2022	from 17.12.0 before 17.12.19 from 17.14.0 before 17.14.30