PT-2026-58807 · Microsoft · .Net Framework

CVE-2026-50659 · Published 2026-07-14 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.29 .NET versions prior to 9.0.18 .NET versions prior to 10.0.10

Description Improper encoding or escaping of output allows an authorized attacker to perform spoofing over a network by manipulating output in transit.

Recommendations Update to version 8.0.29. Update to version 9.0.18. Update to version 10.0.10.

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

Related Identifiers

CVE-2026-50659

Affected Products

.Net Framework

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-50659 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50659 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077385986053374318 · Twitter Post