Sep 2026: .NET Elevation of Privilege Vulnerability
CVE-2026-69806 Published on September 8, 2026
.NET Elevation of Privilege Vulnerability
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.
Weakness Types
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2026-69806 has been classified to as an Information Disclosure vulnerability or weakness.
What is a Code Injection Vulnerability?
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CVE-2026-69806 has been classified to as a Code Injection vulnerability or weakness.
Products Associated with CVE-2026-69806
Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.
Affected Versions
Microsoft .NET 10.0:- Version 10.0.0 and below 10.0.111, 10.0.400 is affected.
- Version 11.0.0 and below 11.0 RC1 is affected.
- Version 9.0.0 and below 9.0.317 is affected.
- Version 17.14.0 and below 17.14.40 is affected.
- Version 18.9.0 and below 18.9.3 is affected.