RHSA-2026:58567: CVEs fixed (Red Hat)
RHSA-2026:58567 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2026-50649 HIGH 7.8 DOWNGRADE UPGRADE Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.
- CVE-2026-50646 HIGH 7.8 DOWNGRADE UPGRADE Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.
Applies to
- RHEL 10.0 Extended Update Support · fixed in dotnet9.0-9.0.120-1.el10_0