<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 19:52:16 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-21218 — .NET Spoofing Vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-21218</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0&lt;/p&gt;
&lt;p&gt;Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft .NET 10.0, Microsoft .NET 8.0, Microsoft .NET 9.0&lt;/p&gt;
&lt;p&gt;Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-21218</guid>
    </item>
    <item>
      <title>USN-8025-1 — dotnet8, dotnet9, dotnet10 vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/usn-8025-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: dotnet8, Ubuntu:25.10: dotnet10, Ubuntu:25.10: dotnet8, Ubuntu:25.10: dotnet9&lt;/p&gt;
&lt;p&gt;Kevin Jones discovered that the System.Security.Cryptography.Cose component
in .NET did not properly handle certain missing special elements in input
data. An attacker could possibly use this issue to bypass security checks
and gain unauthorized access or perform data manipulation.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: dotnet8, Ubuntu:25.10: dotnet10, Ubuntu:25.10: dotnet8, Ubuntu:25.10: dotnet9&lt;/p&gt;
&lt;p&gt;Kevin Jones discovered that the System.Security.Cryptography.Cose component
in .NET did not properly handle certain missing special elements in input
data. An attacker could possibly use this issue to bypass security checks
and gain unauthorized access or perform data manipulation.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-8025-1</guid>
    </item>
  </channel>
</rss>
