CVE-2026-96237CWE-829

CVE-2026-96237

High · published October 13, 2026

CVSS v3.1

7.5

EPSS

Percentile

45.1

In the wild

Unconfirmed

What it is

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00548 · 45.1th percentile
Weakness: CWE-829 · Inclusion of Functionality from Untrusted Control Sphere
Published: 2026-10-13T23:21Z

References (1)

EPSS history

Timeline