Denial of Service Vulnerabilities in .NET Affect Ubuntu Users

Multiple security vulnerabilities have been identified in the .NET framework, specifically affecting versions 9.0 and 10.0. These vulnerabilities, CVE-2026-26127 and CVE-2026-26130, can lead to denial of service attacks by allowing attackers to exploit malformed Base64Url encoded input and improperly managed resource consumption in the SignalR server component. The affected systems include Ubuntu 25.10, 24.04 LTS, and 22.04 LTS. Users are advised to update their systems to the latest package versions to mitigate these risks. The vulnerabilities were published on March 10, 2026, and have been addressed in the latest security updates. The issues were discovered by security researchers, including Bartłomiej Dach. A standard system update is recommended to ensure all necessary changes are implemented.

Key Points: • Vulnerabilities CVE-2026-26127 and CVE-2026-26130 affect .NET versions 9.0 and 10.0. • Denial of service attacks can result from malformed input and resource management issues. • Users of Ubuntu 25.10, 24.04 LTS, and 22.04 LTS should update their systems immediately.