Medium severity6.5NVD Advisory· Published Sep 8, 2026· Updated Oct 7, 2026
CVE-2026-58649
CVE-2026-58649
Description
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
Affected products
43- osv-coords41 versionspkg:rpm/almalinux/dotnet-runtime-8.0pkg:rpm/almalinux/dotnet-sdk-8.0pkg:rpm/almalinux/dotnet-runtime-dbg-9.0pkg:rpm/almalinux/dotnetpkg:rpm/almalinux/dotnet-hostpkg:rpm/almalinux/dotnet-runtime-dbg-10.0pkg:rpm/almalinux/dotnet-sdk-8.0-source-built-artifactspkg:rpm/almalinux/dotnet-runtime-10.0pkg:rpm/almalinux/dotnet-apphost-pack-10.0pkg:rpm/almalinux/dotnet-targeting-pack-9.0pkg:rpm/almalinux/aspnetcore-runtime-dbg-8.0pkg:rpm/almalinux/aspnetcore-runtime-9.0pkg:rpm/almalinux/aspnetcore-targeting-pack-9.0pkg:rpm/almalinux/dotnet-sdk-dbg-10.0pkg:rpm/almalinux/dotnet-sdk-dbg-9.0pkg:rpm/almalinux/dotnet-sdk-aot-9.0pkg:rpm/almalinux/netstandard-targeting-pack-2.1pkg:rpm/almalinux/dotnet-runtime-9.0pkg:rpm/almalinux/dotnet-runtime-dbg-8.0pkg:rpm/almalinux/dotnet-templates-8.0pkg:rpm/almalinux/aspnetcore-runtime-dbg-9.0pkg:rpm/almalinux/dotnet-hostfxr-9.0pkg:rpm/almalinux/dotnet-sdk-10.0pkg:rpm/almalinux/aspnetcore-runtime-8.0pkg:rpm/almalinux/dotnet-hostfxr-10.0pkg:rpm/almalinux/dotnet-hostfxr-8.0pkg:rpm/almalinux/aspnetcore-targeting-pack-10.0pkg:rpm/almalinux/dotnet-sdk-aot-10.0pkg:rpm/almalinux/dotnet-targeting-pack-10.0pkg:rpm/almalinux/dotnet-sdk-dbg-8.0pkg:rpm/almalinux/aspnetcore-runtime-dbg-10.0pkg:rpm/almalinux/dotnet-sdk-10.0-source-built-artifactspkg:rpm/almalinux/aspnetcore-targeting-pack-8.0pkg:rpm/almalinux/dotnet-apphost-pack-8.0pkg:rpm/almalinux/dotnet-targeting-pack-8.0pkg:rpm/almalinux/dotnet-sdk-9.0pkg:rpm/almalinux/dotnet-sdk-9.0-source-built-artifactspkg:rpm/almalinux/dotnet-templates-9.0pkg:rpm/almalinux/dotnet-templates-10.0pkg:rpm/almalinux/dotnet-apphost-pack-9.0pkg:rpm/almalinux/aspnetcore-runtime-10.0
< 8.0.31-1.el9_8+ 40 more
- (no CPE)range: < 8.0.31-1.el9_8
- (no CPE)range: < 8.0.131-1.el9_8
- (no CPE)range: < 9.0.20-1.el10_2
- (no CPE)range: < 10.0.112-1.el8_10
- (no CPE)range: < 10.0.12-1.el10_2
- (no CPE)range: < 10.0.12-1.el10_2
- (no CPE)range: < 8.0.131-1.el9_8
- (no CPE)range: < 10.0.12-1.el10_2
- (no CPE)range: < 10.0.12-1.el10_2
- (no CPE)range: < 9.0.20-1.el10_2
- (no CPE)range: < 8.0.31-1.el9_8
- (no CPE)range: < 9.0.20-1.el10_2
- (no CPE)range: < 9.0.20-1.el10_2
- (no CPE)range: < 10.0.112-1.el10_2
- (no CPE)range: < 9.0.121-1.el10_2
- (no CPE)range: < 9.0.121-1.el10_2
- (no CPE)range: < 9.0.121-1.el10_2
- (no CPE)range: < 9.0.20-1.el10_2
- (no CPE)range: < 8.0.31-1.el9_8
- (no CPE)range: < 8.0.131-1.el9_8
- (no CPE)range: < 9.0.20-1.el10_2
- (no CPE)range: < 9.0.20-1.el10_2
- (no CPE)range: < 10.0.112-1.el10_2
- (no CPE)range: < 8.0.31-1.el9_8
- (no CPE)range: < 10.0.12-1.el10_2
- (no CPE)range: < 8.0.31-1.el9_8
- (no CPE)range: < 10.0.12-1.el10_2
- (no CPE)range: < 10.0.112-1.el10_2
- (no CPE)range: < 10.0.12-1.el10_2
- (no CPE)range: < 8.0.131-1.el9_8
- (no CPE)range: < 10.0.12-1.el10_2
- (no CPE)range: < 10.0.112-1.el10_2
- (no CPE)range: < 8.0.31-1.el9_8
- (no CPE)range: < 8.0.31-1.el9_8
- (no CPE)range: < 8.0.31-1.el9_8
- (no CPE)range: < 9.0.121-1.el10_2
- (no CPE)range: < 9.0.121-1.el10_2
- (no CPE)range: < 9.0.121-1.el10_2
- (no CPE)range: < 10.0.112-1.el10_2
- (no CPE)range: < 9.0.20-1.el10_2
- (no CPE)range: < 10.0.12-1.el10_2
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58649nvdPatchVendor Advisory
News mentions
2- Patch Tuesday - September 2026Rapid7 Blog · Sep 8, 2026
- Massive Microsoft Patch Tuesday September 2026 – 973 Vulnerabilities Fixed, Including 2 Zero-DaysCyber Security News · Sep 8, 2026