CVE-2026-97801

7.5High

Published 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

7.5High

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: High impact on integrity
Weakness: CWE-1287

Impact

Remote, unauthenticated attackers can tamper with application data over the network. They do not need credentials or user interaction to exploit this.

Root cause

The .NET Framework fails to properly validate the specified type of input received over the network.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Fix & remediation

Install the Microsoft security update for your installed .NET Framework version from Windows Update or the Microsoft Security Update Guide; no workaround is listed.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97801

Source: nvd.nist.gov/vuln/detail/CVE-2026-97801