Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-10-13T19:00:16 dotnet: dotnet: arbitrary code execution via untrusted data deserialization CWE-502

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.

A flaw was found in dotnet. A remote attacker can achieve arbitrary code execution by tricking an application or user into processing maliciously crafted data during deserialization (the process of reconstructing data into an application object). Successful exploitation allows the attacker to execute unauthorized code over the network within the context of the running application.

Red Hat Hardened Images 2026-10-19T00:00:00Z RHSA-2026:84693 dotnet8-0-main-8.0.132-0.1.hum1 https://www.cve.org/CVERecord?id=CVE-2026-87697 https://nvd.nist.gov/vuln/detail/CVE-2026-87697 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87697