Oct 2026: .NET Framework Tampering Vulnerability
CVE-2026-97801 Published on October 13, 2026

.NET Framework Tampering Vulnerability
Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

YES

Technical Impact:

PARTIAL

Weakness Type

Improper Validation of Specified Type of Input

The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

Products Associated with CVE-2026-97801

stack.watch emails you whenever new vulnerabilities are published in Microsoft Net or Microsoft .NET Framework. Just hit a watch button to start following.

Microsoft Net

Microsoft .NET Framework

Affected Versions

Microsoft .NET Framework 3.5:

Version 3.5.0 and below 2.0.50727.9188 AND 3.0.30729.9171 is affected.

Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2:

Version 3.0.0.0 and below 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 is affected.

Microsoft .NET Framework 3.5 AND 4.7.2:

Version 4.7.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 is affected.

Microsoft .NET Framework 3.5 AND 4.8:

Version 4.8.0 and below 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 is affected.

Microsoft .NET Framework 3.5 AND 4.8.1:

Version 4.8.1 and below 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 is affected.

Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2:

Version 4.7.0 and below 4.7.4150.0 is affected.

Microsoft .NET Framework 4.8:

Version 4.8.0 and below 4.8.4811.0 is affected.

Microsoft .NET Framework 4.8.1:

Version 4.8.0.0 and below 4.8.9363.0 is affected.

Exploit Probability

EPSS

0.73%

Percentile

54.96%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.