CVE-2026-23666

HIGH 7.5CVE-2026-23666 · Published 14/04/2026 · updated 26/10/2026

In short

CVE-2026-23666 is a HIGH (CVSS 7.5) vulnerability affecting .net framework (microsoft).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
.net framework microsoft	`= 3.5= 4.6.2= 4.7= 4.7.1= 4.7.2= 4.8= 4.8.1`	No fix yet

Improper input validation in .NET Framework allows an unauthorized attacker to deny service over a network.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 3.5= 4.6.2= 4.7= 4.7.1= 4.7.2= 4.8= 4.8.1

No fix yet

More vulnerabilities in .net framework

See all →