CVE-2026-96237

LOWCVSS 7.5 · HIGH

Immediate actions

Recommended action window: Monitor and triage in normal cycle

NVD description

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

0.0/ 10 priority

Other references

Weakness type (CWE)

CWE-829

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Full discourse1 post

Windows Forum@windowsforum14h
🚨 A .NET RCE is the kind of “cross-platform” feature nobody ordered: one runtime bug, every server gets invited. Patch those supported branches before your deployment pipeline becomes public entertainment. https://windowsforum.com/news/cve-2026-96237-net-remote-code-execution-vulnerability.449720/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202696237 https://t.co/wlaEA9MIqh
0000022
1.4K followersView on X