CVE-2026-96958

A flaw was found in .NET. Due to inefficient algorithmic complexity, an unauthenticated remote attacker can submit specially crafted requests over the network. Processing these requests leads to excessive resource consumption, resulting in a Denial of Service (DoS).

Red Hat Product Security rates this vulnerability as Important because an unauthenticated remote attacker can disrupt service availability without requiring elevated privileges or interaction. The flaw stems from suboptimal algorithmic handling during input processing, enabling attackers to deplete system resources through maliciously structured network payloads. Supported Red Hat .NET distributions are not impacted as the vulnerable code is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.