CVE-2026-50528

Summary

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

Affected Software

VendorProductVersion RangeStatus
Microsoft.NET 10.010.0.0 < 10.0.6affected
Microsoft.NET 8.08.0.0 < 8.0.29affected
Microsoft.NET 9.09.0.0 < 9.0.18affected
MicrosoftMicrosoft Visual Studio 2022 version 17.1217.12.0 < 17.12.22affected
MicrosoftMicrosoft Visual Studio 2022 version 17.1417.14.0 < 17.14.36affected
MicrosoftMicrosoft Visual Studio 2026 version 18.718.0 < 18.7.4affected

Weaknesses

  • CWE-863: CWE-863: Incorrect Authorization
  • CWE-302: CWE-302: Authentication Bypass by Assumed-Immutable Data
  • CWE-636: CWE-636: Not Failing Securely ('Failing Open')

References