All vulnerabilities

Servers and applications

CVE-2026-32175

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories. To exploit the vulnerability, an attacker must send a…

Severity
Medium 4.3
Published
12 May 2026
Last changed
18 Jun 2026
Added to UpHeron
22 Oct 2026
Fixed in
8.0.27, 9.0.16
Sources
NVD

Affected software

SoftwareAffected versions
.NETServers and applications · cpe:a:microsoft:.net
  • From 8.0.0 before 8.0.27
  • From 9.0.0 before 9.0.16

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-32175
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-32175