PT-2026-32839 · Microsoft+3 · .Net Framework+3

Ludvig Pedersen · Published 2026-04-14 · Updated 2026-05-08 · CVE-2026-32178

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions .NET versions 8.0.0 through 8.0.25 .NET versions 9.0.0 through 9.0.14 .NET versions 10.0.0 through 10.0.5

Description Improper neutralization of special elements in System.Net.Mail allows an unauthorized attacker to perform a spoofing attack over a network by using specially crafted data.

Recommendations Update .NET 8.0 to version 8.0.26. Update .NET 9.0 to version 9.0.15. Update .NET 10.0 to version 10.0.6.

Fix

Weakness Enumeration

CWE-138

Related Identifiers

ALSA-2026:8468

ALSA-2026:8469

ALSA-2026:8470

ALSA-2026:8472

ALSA-2026:8473

ALSA-2026:8475

BDU:2026-05457

BIT-DOTNET-2026-32178

BIT-DOTNET-SDK-2026-32178

CVE-2026-32178

GHSA-VMWF-M9C5-3JVC

RHSA-2026:13693

RHSA-2026:8467

RHSA-2026:8468

RHSA-2026:8469

RHSA-2026:8470

RHSA-2026:8471

RHSA-2026:8472

RHSA-2026:8473

RHSA-2026:8474

RHSA-2026:8475

RHSA-2026:9077

RHSA-2026:9080

RHSA-2026:9205

USN-8176-1

USN-8216-1

Affected Products

.Net Framework

Linuxmint

Rocky Linux

Ubuntu

References · 66

• https://linux.oracle.com/errata/ELSA-2026-8474.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05457 · Security Note
• https://errata.almalinux.org/8/ALSA-2026-8468.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33116 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-sdk-2026-32178 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40372 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-32203 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-8473.html · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-8472.html · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-32178 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32178 · Security Note
• https://errata.almalinux.org/9/ALSA-2026-8469.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:8469 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8176-1 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178 · Vendor Advisory