CVE-2026-96238

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux and container images shipping the .NET SDK because exploitation requires user interaction during template installation operations rather than affecting application runtime execution. While standard package dependency resolution is unaffected, executing template installation commands can cause the SDK to query feeds beyond configured NuGet Package Source Mapping trust boundaries. This flaw primarily presents a risk in development and continuous integration environments where multi-source package repositories are configured.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.