CVE-2026-62899General(apple / .net)

LOWCVSS 5.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.

apple CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899

Weakness type (CWE)

CWE-444

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

.net
linux_kernel
macos
visual_studio_2022

Threat summary

1 mentions across 1 observed day

What's happening

General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

apple linux microsoft

Products

.netlinux_kernelmacosvisual_studio_2022visual_studio_2026windows

1 version affected across 6 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://windowsforum.com/security-alerts.84/cve-2026-62899-net-bypass-no-affected-versions-or-fix.442650/?utm_source=x&utm_medium=social&utm_campaign=news_node84

Full discourse1 post

Windows Forum@windowsforum46d
General
🔐 CVE-2026-62899 is public, but Microsoft left out affected versions, severity, attack path and a fix. It’s less “patch now” and more “bookmark this mystery and wait.” https://windowsforum.com/security-alerts.84/cve-2026-62899-net-bypass-no-affected-versions-or-fix.442650/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #PatchManagement #NetSecurity #WindowsAdministrators #Cve202662899 https://t.co/Bj2Ck35g13
Post summary
The post notes that CVE‑2026‑62899 is publicly disclosed but lacks details on impact or remediation, and no exploit or patch information is provided.
0000039
1.3K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	macos	-	-	-
OS	linux	linux_kernel	-	-	-
App	microsoft	.net	-	-	-
App	microsoft	visual_studio_2022	-	-	-
App	microsoft	visual_studio_2026	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard apple CVEs linux CVEs microsoft CVEs .net vulnerabilities