CVE-2026-69806

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally.

Scoring

Severity

HIGH

CVSS base score

7

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS probability

1.82%

CWE

CWE-200, CWE-94

Published

2026-09-08

Last modified

2026-09-10

Affected products

• Microsoft .NET 10.0
• Microsoft .NET 11.0
• Microsoft .NET 9.0
• Microsoft Microsoft Visual Studio 2022 version 17.14
• Microsoft Microsoft Visual Studio 2026 version 18.9

Weakness type

• CWE-200
• CWE-94

Related vulnerabilities

• CVE-2026-88893 — OpenPanel Unauthenticated Share Lookup Information Disclosure
• CVE-2026-88876 — AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD
• CVE-2026-88874 — AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass
• CVE-2026-0305 — Prisma Access Agent: Information Disclosure Vulnerability on Linux
• CVE-2026-87017 — Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
• CVE-2026-86767 — Snipe-IT before 8.7.0 Cross-Company Read via requested-assets
• CVE-2026-87820 — CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner
• CVE-2026-87810 — Siyuan before v3.8.2 Information Disclosure via fullTextSearchBlock

Markdown version · Browse all CVEs