CVE-2026-45491CWE-59
.NET Tampering Vulnerability
Medium · published June 9, 2026
What it is
Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.
The record
Technical detail
- CVSS v3.1
- 6.2 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C
- CVSS v4.0
- Not supplied
- EPSS
- 0.00372 · 30.0th percentile
- Weakness
- CWE-59 · Improper Link Resolution Before File Access ('Link Following')
- Published
- 2026-06-09T17:04Z
EPSS history
Timeline