Medium 6.8

.NET Security Feature Bypass Vulnerability

CVE-2026-118746 First seen on SecPulse 03:21

Summary

Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
Microsoft	Microsoft.NET 11.0 installed on Linux	≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0	11.0.0
Microsoft	Microsoft.NET 11.0 installed on Mac OS	≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0	11.0.0

References

• web secure@microsoft.com