Linuxsecurity Critical .NET Vulnerabilities in Ubuntu Affect Multiple Releases
Article Content
- •Two critical vulnerabilities in .NET affect multiple Ubuntu releases.
- •CVE-2026-45491 allows unauthorized file tampering, while CVE-2026-45591 can cause denial of service.
- •Users are urged to update their systems to the latest package versions to mitigate risks.
On June 9, 2026, two critical vulnerabilities in .NET were disclosed, affecting Ubuntu versions 26.04 LTS, 25.10, 24.04 LTS, and 22.04 LTS. The vulnerabilities include CVE-2026-45491, which allows unauthorized file tampering, and CVE-2026-45591, which can lead to denial of service through excessive resource consumption. Attackers can exploit these flaws locally, posing a significant risk to systems using .NET CLI tools and runtime. Users are advised to update their systems to the latest package versions to mitigate these vulnerabilities. The vulnerabilities were confirmed by Ubuntu's security team and are part of a broader advisory for .NET users. A standard system update will address the issues.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track CVE-2026-45491 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25… 
KeyDrift Malware Exploits Cisco SD-WAN Flaw CVE-2026-20127 Cisco Talos reported that the advanced persistent threat group UAT-11473 exploited a critical authentication bypass vulnerability (CVE-2026-20127) in Cisco SD-WAN Catalyst Controllers. This flaw, which has a CVSS score of 10.0, allows unauthorized remote access to administrative privileges. The group deployed a custom…