Oct 2026: .NET Information Disclosure Vulnerability
CVE-2026-66822 Published on October 13, 2026
.NET Information Disclosure Vulnerability
Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.
Weakness Type
Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor. Sensitive information could include data that is sensitive in and of itself (such as credentials or private messages), or otherwise useful in the further exploitation of the system (such as internal file system structure).
Products Associated with CVE-2026-66822
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft .NET 10.0:- Version 10.0.0 and below 10.0.13 is affected.
- Version 11.0.0 and below 11.0.0-rc.2 is affected.
- Version 8.0.0 and below 8.0.32 is affected.
- Version 9.0.0 and below 9.0.21 is affected.
- Version 17.14.0 and below 17.14.42 is affected.
- Version 18.10.0 and below 18.10.4 is affected.