PT-2026-47971 · Microsoft+3 · .Net Framework+3

Ashmit Sharma + 1 · CVE-2026-45491 · Published 2026-06-09 · Updated 2026-06-18

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions .NET (affected versions not specified)

Description Improper link resolution before file access, also known as link following, allows an unauthorized attacker to perform local tampering.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALSA-2026:25110

ALSA-2026:25111

ALSA-2026:25112

ALSA-2026:25113

ALSA-2026:25114

ALSA-2026:25115

ALSA-2026:25220

ALSA-2026:25221

ALSA-2026:25222

BDU:2026-08675

BIT-DOTNET-2026-45491

BIT-DOTNET-SDK-2026-45491

CVE-2026-45491

GHSA-7Q4V-2MR6-5GPX

RHSA-2026:25110

RHSA-2026:25111

RHSA-2026:25112

RHSA-2026:25113

RHSA-2026:25114

RHSA-2026:25115

RHSA-2026:25220

RHSA-2026:25221

RHSA-2026:25222

RHSA-2026:26638

RHSA-2026:26994

RHSA-2026:28007

RHSA-2026:28009

RHSA-2026:28011

RHSA-2026:28051

RHSA-2026:28227

USN-8420-1

Affected Products

.Net Framework

Linuxmint

Rocky Linux

Ubuntu

References · 66

• https://linux.oracle.com/errata/ELSA-2026-25220.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-08675 · Security Note
• https://errata.almalinux.org/9/ALSA-2026-25220.html · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45491 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-25110.html · Vendor Advisory
• https://errata.almalinux.org/10/ALSA-2026-25112.html · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:25110 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8420-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:25113 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45491 · Security Note
• https://errata.rockylinux.org/RLSA-2026:25221 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-25222.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:25114 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7q4v-2mr6-5gpx · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-25111.html · Vendor Advisory