RHSA-2026:41897: CVEs fixed (Red Hat)

RHSA-2026:41897 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-50649 HIGH 7.8 DOWNGRADE UPGRADE Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
• CVE-2026-50646 HIGH 7.8 DOWNGRADE UPGRADE Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Applies to

• RHEL 10 · fixed in dotnet10.0-10.0.110-1.el10_2

← Back to latest CVEs