CVE-2026-50649

highEPSS 0.040 · 90 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

4.02% (90th) EPSS

CVSS 7.8 · high

Is it mine?

49 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-17

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.8highAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Csecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · secure@microsoft.com USexploitability 1.8 · impact 5.9

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-502USCWE-502US

affected products (49)

Products and version ranges known to be affected.

Fedora Linuxall versionscert_bundDEcpe:/o:fedoraproject:fedora:-
Microsoft .NET 10.0all versionscert_bundDEcpe:/a:microsoft:.net:10.0
Microsoft .NET 8.0all versionscert_bundDEcpe:/a:microsoft:.net:8.0
Microsoft .NET 9.0all versionscert_bundDEcpe:/a:microsoft:.net:9.0
Microsoft .NET Framework 3.5all versionscert_bundDEcpe:/a:microsoft:.net_framework:3.5
Microsoft .NET Framework 4.7.2all versionscert_bundDEcpe:/a:microsoft:.net_framework:4.7.2
Microsoft .NET Framework 4.8all versionscert_bundDEcpe:/a:microsoft:.net_framework:4.8
Microsoft .NET Framework 4.8.1all versionscert_bundDEcpe:/a:microsoft:.net_framework:4.8.1
Microsoft Visual Studio 2022 version 17.12all versionscert_bundDE
Microsoft Visual Studio 2022 version 17.14all versionscert_bundDE
Microsoft Visual Studio 2026 version 18.7all versionscert_bundDE
Microsoft Visual Studio Codeall versionscert_bundDEcpe:/a:microsoft:visual_studio_code:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsall versionscert_bundDEcpe:/o:redhat:enterprise_linux:9.4_update_services_for_sap_solutions
Red Hat Enterprise Linux 9.6 Extended Update Supportall versionscert_bundDEcpe:/o:redhat:enterprise_linux:9.6_extended_update_support
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Microsoft .NET 8.08.0.0 → 8.0.29enisa_euvdEU
Microsoft .NET 9.09.0.0 → 9.0.18enisa_euvdEU

showing 20 of 49

advisories (3)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-2324Microsoft DeveloperTools: Mehrere SchwachstellenDeutsch2026-07-14csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio Code, .NET Framework, Microsoft .NET, Visual Studio 2022 und Visual Studio 2026 ausnutzen, um erweiterte Berechtigungen, einschließlich Administratorrechte, zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen, einen Denial-of-Service-Zustand auszulösen oder Spoofing-Angriffe durchzuführen.
BIT-dotnet-2026-50649.NET Remote Code Execution Vulnerability2026-07-27vendor · osvUS
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
BIT-dotnet-sdk-2026-50649.NET Remote Code Execution Vulnerability2026-07-27vendor · osvUS
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

also known as (5)

Other names and identifiers for this entity.

CNNVD-2026-39394672 cnnvd
EUVD-2026-44399 enisa_euvd
BDU:2026-09808 fstec_bdu
BIT-dotnet-2026-50649osv
BIT-dotnet-sdk-2026-50649osv

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund NVD CVE.org MITRE

published 2026-07-14modified 2026-09-01

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan