This page tracks the Ubuntu fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-114148 →
Unrated
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
UBUNTU-CVE-2026-114148
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Ubuntu:22.04:LTSdotnet6 |
All versions→ Not listed |
Not listed |
| Ubuntu:22.04:LTSdotnet7 |
All versions→ Not listed |
Not listed |
| Ubuntu:22.04:LTSdotnet8 |
< 8.0.133-8.0.33-0ubuntu1~22.04.1→ 8.0.133-8.0.33-0ubuntu1~22.04.1 |
8.0.133-8.0.33-0ubuntu1~22.04.1 |
| Ubuntu:24.04:LTSdotnet10 |
< 10.0.114-10.0.14-0ubuntu1~24.04.1→ 10.0.114-10.0.14-0ubuntu1~24.04.1 |
10.0.114-10.0.14-0ubuntu1~24.04.1 |
| Ubuntu:24.04:LTSdotnet8 |
< 8.0.133-8.0.33-0ubuntu1~24.04.1→ 8.0.133-8.0.33-0ubuntu1~24.04.1 |
8.0.133-8.0.33-0ubuntu1~24.04.1 |
| Ubuntu:26.10dotnet10 |
< 10.0.114-10.0.14-0ubuntu1~26.10.1→ 10.0.114-10.0.14-0ubuntu1~26.10.1 |
10.0.114-10.0.14-0ubuntu1~26.10.1 |
| Ubuntu:26.10dotnet11 |
< 11.0.100-11.0.0~rc3-0ubuntu1~26.10.1→ 11.0.100-11.0.0~rc3-0ubuntu1~26.10.1 |
11.0.100-11.0.0~rc3-0ubuntu1~26.10.1 |
| Ubuntu:26.04:LTSdotnet10 |
< 10.0.114-10.0.14-0ubuntu1~26.04.1→ 10.0.114-10.0.14-0ubuntu1~26.04.1 |
10.0.114-10.0.14-0ubuntu1~26.04.1 |
Original description The description as published by the source.
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Source: OSV.dev (Open Source Vulnerabilities) OSV
References
- advisory ubuntu.com
- report ubuntu.com
- report cve.org
- report msrc.microsoft.com
- report github.com
- report devblogs.microsoft.com