Bug 2500565 (CVE-2026-50526)
| Summary: | CVE-2026-50526 dotnet: .NET: Local tampering via improper link resolution | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | rhel-process-autobot, sdawley, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2501484, 2501488, 2501489 | ||
| Bug Blocks: | |||
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:41899 https://access.redhat.com/errata/RHSA-2026:41899 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:41893 https://access.redhat.com/errata/RHSA-2026:41893 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:41895 https://access.redhat.com/errata/RHSA-2026:41895 This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:41897 https://access.redhat.com/errata/RHSA-2026:41897 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:41900 https://access.redhat.com/errata/RHSA-2026:41900 This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2026:41901 https://access.redhat.com/errata/RHSA-2026:41901 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:41894 https://access.redhat.com/errata/RHSA-2026:41894 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:41896 https://access.redhat.com/errata/RHSA-2026:41896 This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:41898 https://access.redhat.com/errata/RHSA-2026:41898 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:58566 https://access.redhat.com/errata/RHSA-2026:58566 This issue has been addressed in the following products: Red Hat Enterprise Linux 10.0 Extended Update Support Via RHSA-2026:58567 https://access.redhat.com/errata/RHSA-2026:58567 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Via RHSA-2026:58568 https://access.redhat.com/errata/RHSA-2026:58568 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:58569 https://access.redhat.com/errata/RHSA-2026:58569 This issue has been addressed in the following products: Red Hat Enterprise Linux 9.6 Extended Update Support Via RHSA-2026:58570 https://access.redhat.com/errata/RHSA-2026:58570 |
Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.