CVE-2026-97801
Description
A flaw was found in .NET Framework. An unauthenticated remote attacker could exploit improper input validation by sending specially crafted input over the network. Successful exploitation allows an attacker to tamper with application data and make unauthorized modifications to the system state.
Statement
Red Hat Product Security rates this vulnerability as Important due to the potential for unauthenticated remote attackers to compromise data integrity across network boundaries without requiring specialized privileges. In Red Hat environments hosting .NET workloads, exposure is limited to services exposing endpoints that ingest untrusted user input. While the vulnerability enables unauthorized modification of application state, it does not directly lead to arbitrary code execution or confidentiality disclosure.
Understanding the Weakness (CWE)
Other
Technical Impact: Varies by Context
When input does not comply with the expected type, attackers could trigger unexpected errors, cause incorrect actions to take place, or exploit latent vulnerabilities that would not be possible if the input conformed with the expected type.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
