CVE-2026-96234

Description

A flaw was found in .NET. An origin validation error allows an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and enables an attacker to access restricted data without proper authorization.

Statement

This vulnerability is rated as Moderate because successful exploitation requires specific user interaction alongside complex environmental conditions to circumvent origin checks. While the flaw can lead to unauthorized exposure of sensitive data across the network, it does not allow remote code execution or tampering with system integrity. In Red Hat deployments hosting .NET applications or containerized services, exposure is primarily confined to scenarios where client-side interactions can be manipulated to compromise boundary protections.

Understanding the Weakness (CWE)

Access Control,Other

Technical Impact: Gain Privileges or Assume Identity; Varies by Context

An attacker can access any functionality that is inadvertently accessible to the source.

Frequently Asked Questions

Want to get errata notifications? Sign up here.