Sep 2026: .NET Information Disclosure Vulnerability
CVE-2026-58649 Published on September 8, 2026

.NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

Technical Impact:

PARTIAL

Weakness Type

Origin Validation Error

The software does not properly verify that the source of data or communication is valid.

Products Associated with CVE-2026-58649

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-58649 are published in these products:

Microsoft Visual Studio 2022

Microsoft Net

Microsoft Visual Studio 2026

Canonical Ubuntu Linux

Affected Versions

Microsoft .NET 10.0 runtime:

Version 10.0.0 and below 10.0.111, 10.0.400 is affected.

Microsoft .NET 11.0 runtime:

Version 11.0.0 and below 11.0 RC1 is affected.

Microsoft .NET 8.0 runtime:

Version 8.0.0 and below 8.0.130, 8.0.424 is affected.

Microsoft .NET 9.0 runtime:

Version 9.0.0 and below 9.0.120, 9.0.317 is affected.

Microsoft Visual Studio 2022 version 17.14:

Version 17.14.0 and below 17.14.40 is affected.

Microsoft Visual Studio 2026 version 18.9:

Version 18.9.0 and below 18.9.3 is affected.

Exploit Probability

EPSS

0.36%

Percentile

30.13%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.