ALAS2023-2026-1506: CVEs fixed (Amazon Linux)

ALAS2023-2026-1506 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-26130 HIGH 7.5 UPGRADE Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s
• CVE-2026-26127 HIGH 7.5 UPGRADE UPGRADE Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

Applies to

• Amazon Linux 2023

← Back to latest CVEs