https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T19:52:18.637788+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-21218 CVE-2026-21218 — .NET Spoofing Vulnerability 2026-10-01T19:52:18.640824+00:00

Affected: Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0

Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.

 https://vulnerability.circl.lu/vuln/usn-8025-1 USN-8025-1 — dotnet8, dotnet9, dotnet10 vulnerability 2026-10-01T19:52:18.640931+00:00

Affected: Ubuntu:22.04:LTS: dotnet8, Ubuntu:25.10: dotnet10, Ubuntu:25.10: dotnet8, Ubuntu:25.10: dotnet9

Kevin Jones discovered that the System.Security.Cryptography.Cose component in .NET did not properly handle certain missing special elements in input data. An attacker could possibly use this issue to bypass security checks and gain unauthorized access or perform data manipulation.