VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 8, 2026· Updated Sep 29, 2026

CVE-2026-69805

CVE-2026-69805

Description

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

Affected products

4
  • Microsoft/Microsoft.diagnostics.runtime
    cpe:2.3:a:microsoft:microsoft.diagnostics.runtime:*:*:*:*:*:*:*:*
    Range: <4.1.740301
  • Microsoft/Visual Studio2 versions
    cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*range: >=17.14.0,<17.14.40
    • cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*range: >=18.9.0,<18.9.3
  • Microsoft/Netllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

2