PT-2026-32839 · Microsoft+4 · .Net Framework+4

Ludvig Pedersen · Publicado 2026-04-14 · Atualizado 2026-06-08 · CVE-2026-32178

Positive Technologies (AI Summary) · Pt

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions .NET versões 8.0.0 até 8.0.25 .NET versões 9.0.0 até 9.0.14 .NET versões 10.0.0 até 10.0.5

Description A neutralização inadequada de elementos especiais em System.Net.Mail permite que um invasor não autorizado realize um ataque de spoofing através da rede utilizando dados especialmente criados.

Recommendations Atualizar o .NET 8.0 para a versão 8.0.26. Atualizar o .NET 9.0 para a versão 9.0.15. Atualizar o .NET 10.0 para a versão 10.0.6.

Correção

DoS

Enumeração de Fraquezas

CWE-138

Identificadores relacionados

ALSA-2026:8468

ALSA-2026:8469

ALSA-2026:8470

ALSA-2026:8472

ALSA-2026:8473

ALSA-2026:8475

BDU:2026-05457

BIT-DOTNET-2026-32178

BIT-DOTNET-SDK-2026-32178

CVE-2026-32178

GHSA-VMWF-M9C5-3JVC

RHSA-2026:13693

RHSA-2026:8467

RHSA-2026:8468

RHSA-2026:8469

RHSA-2026:8470

RHSA-2026:8471

RHSA-2026:8472

RHSA-2026:8473

RHSA-2026:8474

RHSA-2026:8475

RHSA-2026:9077

RHSA-2026:9080

RHSA-2026:9205

USN-8176-1

USN-8216-1

Produtos afetados

.Net Framework

Linuxmint

Red Os

Rocky Linux

Ubuntu

Referências · 72

• https://github.com/dotnet/runtime · Nota
• https://github.com/dotnet/runtime/security/advisories/GHSA-vmwf-m9c5-3jvc · Nota
• https://github.com/dotnet/announcements/issues/390 · Nota
• https://github.com/dotnet/announcements/issues/12345 · Nota
• https://errata.almalinux.org/8/ALSA-2026-8473.html · Aviso do Fabricante
• https://twitter.com/dailycve/status/2044243368817860677 · Publicação no Twitter
• https://linux.oracle.com/errata/ELSA-2026-8473.html · Aviso do Fabricante
• https://errata.rockylinux.org/RLSA-2026:8473 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-dotnet8-0-cve-2026-32178-8.0 · Nota
• https://errata.rockylinux.org/RLSA-2026:8469 · Aviso do Fabricante
• https://twitter.com/Cezar_H_Linux/status/2045907618657374557 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2045112949094969471 · Publicação no Twitter
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-dotnet9-0-cve-2026-32178-7.3 · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-dotnet9-0-cve-2026-32178-8.0 · Nota
• https://access.redhat.com/security/cve/CVE-2026-32203 · Nota