VDB
RHSA-2026:54538
RHSA-2026:54538
PUBLISHED
CVSS 7.800000190734863 HIGH
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | dotnet8.0-debuginfo-0:8.0.130-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux CRB (v. 8) | 8.0-debuginfo |
| Red Hat | dotnet8.0-debugsource-0:8.0.130-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-debugsource |
| Red Hat | dotnet-runtime-8.0-debuginfo-0:8.0.30-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux CRB (v. 8) | 8.0-debuginfo |
| Red Hat | dotnet-sdk-8.0-debuginfo-0:8.0.130-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-debuginfo |
| Red Hat | dotnet-targeting-pack-8.0-0:8.0.30-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-0 |
| Red Hat | dotnet-sdk-8.0-debuginfo-0:8.0.130-1.el8_10.s390x as a component of Red Hat Enterprise Linux CRB (v. 8) | 8.0-debuginfo |
| Red Hat | dotnet-hostfxr-8.0-debuginfo-0:8.0.30-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-debuginfo |
| Red Hat | dotnet-runtime-8.0-debuginfo-0:8.0.30-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8) | 8.0-debuginfo |
| Red Hat | dotnet-runtime-dbg-8.0-0:8.0.30-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-0 |
| Red Hat | dotnet8.0-debugsource-0:8.0.130-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-debugsource |
| Red Hat | aspnetcore-targeting-pack-8.0-0:8.0.30-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-0 |
| Red Hat | aspnetcore-runtime-8.0-0:8.0.30-1.el8_10.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-0 |
| Red Hat | dotnet-templates-8.0-0:8.0.130-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-0 |
| Red Hat | dotnet8.0-debuginfo-0:8.0.130-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-debuginfo |
| Red Hat | dotnet8.0-debugsource-0:8.0.130-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux CRB (v. 8) | 8.0-debugsource |
| Red Hat | aspnetcore-targeting-pack-8.0-0:8.0.30-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-0 |
| Red Hat | dotnet-targeting-pack-8.0-0:8.0.30-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-0 |
| Red Hat | dotnet-templates-8.0-0:8.0.130-1.el8_10.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-0 |
| Red Hat | dotnet8.0-debuginfo-0:8.0.130-1.el8_10.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-debuginfo |
| Red Hat | dotnet8.0-debugsource-0:8.0.130-1.el8_10.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8) | 8.0-debugsource |
…and 77 more
Timeline
- Aug 13, 2026 CVE Published
- Aug 13, 2026 CVE Updated
- Aug 13, 2026 Distribution Patch
- Aug 13, 2026 Distribution Patch
- Aug 13, 2026 Security Advisory
- Aug 13, 2026 Security Advisory
- Aug 13, 2026 Security Advisory
- Aug 13, 2026 Security Advisory
- Aug 13, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:54538 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512175 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2512179 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2512180 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2512185 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54538.json advisory
- https://access.redhat.com/security/cve/CVE-2026-62899 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-62899 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-62899 advisory
- https://access.redhat.com/security/cve/CVE-2026-62900 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-62900 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-62900 advisory
- https://access.redhat.com/security/cve/CVE-2026-62901 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-62901 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-62901 advisory
- https://access.redhat.com/security/cve/CVE-2026-62909 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-62909 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-62909 advisory