CVE-2026-58649

Analyzed Analyzed - Analysis Complete

.NET Origin Validation Error Leads to Information Disclosure

Publication date: 2026-09-08

Last updated on: 2026-10-07

Assigner: Microsoft Corporation

Description

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-09-10

EPSS Evaluated

2026-10-18

NVD

CVE-2026-58649

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	.net	11.0.0
microsoft	.net	11.0.0
microsoft	.net	11.0.0
microsoft	.net	11.0.0
microsoft	.net	11.0.0
microsoft	.net	11.0.0
microsoft	.net	11.0.0
microsoft	.net_sdk	From 10.0.100 (inc) to 10.0.111 (exc)
microsoft	.net_sdk	From 10.0.200 (inc) to 10.0.400 (exc)
microsoft	.net_sdk	From 8.0.100 (inc) to 8.0.130 (exc)
microsoft	.net_sdk	From 8.0.200 (inc) to 8.0.424 (exc)
microsoft	.net_sdk	From 9.0.100 (inc) to 9.0.120 (exc)
microsoft	.net_sdk	From 9.0.200 (inc) to 9.0.317 (exc)
microsoft	visual_studio_2026	From 18.9.0 (inc) to 18.9.3 (exc)
microsoft	visual_studio_2022	From 17.14.0 (inc) to 17.14.40 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-346	The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

Executive Summary

This vulnerability is an origin validation error in .NET that allows an unauthorized attacker to disclose information over a network. It involves improper validation of the origin of requests, potentially exposing sensitive data.

Impact Analysis

An attacker could exploit this to access confidential information transmitted over the network. The impact includes potential data breaches, loss of sensitive data, and unauthorized access to user or system information.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations due to unauthorized data disclosure. Organizations may face legal penalties, reputational damage, and loss of trust if sensitive data is exposed.

Mitigation Strategies

Apply the latest security updates from Microsoft for .NET to address the origin validation error. Monitor Microsoft's security advisories for patches and verify their installation on affected systems.

Hi! I’m here to help you understand CVE-2026-58649. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70