Vulnerability in Microsoft .NET 10.0 installed on Linux

[ Description ]Official description

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

[ Fixes ]Fixes and patches

• Security bulletin: Microsoft .Net CVE-2026-114148Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148, cited by CERT-FR CERTFR-2026-AVI-1382
• Security bulletin: Microsoft .Net CVE-2026-111497Vendor patch or bulletin · CERT-FR · msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497, cited by CERT-FR CERTFR-2026-AVI-1382

[ Advisories ]Government CERT advisories

• CERT-FR26 Oct 2026CERTFR-2026-AVI-1382

  Multiple vulnerabilities in Microsoft .Net Translated from French

  Multiple vulnerabilities have been discovered in Microsoft .Net. They allow an attacker to cause privilege escalation.

  CVE-2026-114148CVE-2026-111497
• BSI CERT-Bund25 Oct 2026WID-SEC-2026-4162

  Microsoft .NET and ASP.NET: Vulnerability allows privilege escalation Translated from German

  CVE-2026-28330CVE-2026-114148

[ References ]References

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148