{"schema":"vulnpedia.research/1","cve":"CVE-2026-84008","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008","tags":["vendor-advisory","patch","WEB","vendor-reference"],"source":"mitre","sourceId":"microsoft","modified":"2026-10-25T18:47:38.979Z","origins":[{"source":"mitre","sourceId":"microsoft","modified":"2026-10-25T18:47:38.979Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008"},{"source":"nvd","sourceId":"CVE-2026-84008","modified":"2026-10-22T22:19:18.997","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008"},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008"},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008"},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84008"}]},{"url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx"},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx"}]},{"url":"https://github.com/dotnet/runtime/security/advisories/GHSA-846f-f764-76mx","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://github.com/dotnet/runtime/security/advisories/GHSA-846f-f764-76mx"},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://github.com/dotnet/runtime/security/advisories/GHSA-846f-f764-76mx"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84008","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84008"},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84008"},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84008"}]},{"url":"https://github.com/dotnet/announcements/issues/468","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://github.com/dotnet/announcements/issues/468"},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://github.com/dotnet/announcements/issues/468"}]},{"url":"https://github.com/dotnet/runtime/issues/135703","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://github.com/dotnet/runtime/issues/135703"},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://github.com/dotnet/runtime/issues/135703"}]},{"url":"https://github.com/dotnet/runtime","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://github.com/dotnet/runtime"},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://github.com/dotnet/runtime"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84008","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-84008"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550849","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2550849"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84008","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-84008"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84693","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84693"}]},{"source":"euvd","sourceId":"EUVD-2026-100199","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100199","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-100199","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100199"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx","ecosystem":"NuGet","name":"System.Security.Cryptography.Pkcs","purl":"pkg:nuget/System.Security.Cryptography.Pkcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0.0"},{"fixed":"10.0.13"}]}],"versions":["10.0.0","10.0.1","10.0.10","10.0.11","10.0.12","10.0.2","10.0.3","10.0.4","10.0.5","10.0.6","10.0.7","10.0.8","10.0.9"],"databaseSpecific":{"last_known_affected_version_range":"<= 10.0.12","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-846f-f764-76mx/GHSA-846f-f764-76mx.json"},"modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx"}]},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx","ecosystem":"NuGet","name":"System.Security.Cryptography.Pkcs","purl":"pkg:nuget/System.Security.Cryptography.Pkcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.0-preview.1"},{"fixed":"11.0.0-rc.2"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 11.0.0-rc.1","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-846f-f764-76mx/GHSA-846f-f764-76mx.json"},"modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx"}]},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx","ecosystem":"NuGet","name":"System.Security.Cryptography.Pkcs","purl":"pkg:nuget/System.Security.Cryptography.Pkcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.0.0"},{"fixed":"8.0.2"}]}],"versions":["8.0.0","8.0.1"],"databaseSpecific":{"last_known_affected_version_range":"<= 8.0.1","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-846f-f764-76mx/GHSA-846f-f764-76mx.json"},"modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx"}]},{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx","ecosystem":"NuGet","name":"System.Security.Cryptography.Pkcs","purl":"pkg:nuget/System.Security.Cryptography.Pkcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0"},{"fixed":"9.0.21"}]}],"versions":["9.0.0","9.0.1","9.0.10","9.0.11","9.0.12","9.0.13","9.0.14","9.0.15","9.0.16","9.0.17","9.0.18","9.0.19","9.0.2","9.0.20","9.0.3","9.0.4","9.0.5","9.0.6","9.0.7","9.0.8","9.0.9"],"databaseSpecific":{"last_known_affected_version_range":"<= 9.0.20","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-846f-f764-76mx/GHSA-846f-f764-76mx.json"},"modified":"2026-10-19T19:30:13.209388554Z","origins":[{"source":"ghsa","sourceId":"GHSA-846f-f764-76mx","modified":"2026-10-19T19:30:13.209388554Z","url":"https://osv.dev/vulnerability/GHSA-846f-f764-76mx"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64","product":"dotnet-sdk-8.0-0:8.0.132-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet-sdk-8.0@8.0.132-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64","product":"dotnet-sdk-8.0-0:8.0.132-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet-sdk-8.0@8.0.132-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64","product":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.132-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64","product":"dotnet-sdk-8.0-source-built-artifacts-0:8.0.132-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet-sdk-8.0-source-built-artifacts@8.0.132-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64","product":"dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.132-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64","product":"dotnet-sdk-dbg-8.0-0:8.0.132-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet-sdk-dbg-8.0@8.0.132-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64","product":"dotnet-templates-8.0-0:8.0.132-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet-templates-8.0@8.0.132-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64","product":"dotnet-templates-8.0-0:8.0.132-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet-templates-8.0@8.0.132-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet8.0-0:8.0.132-0.1.hum1@src","product":"dotnet8.0-0:8.0.132-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84693"},{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."}],"purl":"pkg:rpm/redhat/dotnet8.0@8.0.132-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_10:aspnetcore-runtime-10.0","product":"aspnetcore-runtime-10.0 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/aspnetcore-runtime-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_10:dotnet-host","product":"dotnet-host as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet-host","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_10:dotnet-sdk-10.0","product":"dotnet-sdk-10.0 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet-sdk-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_10:dotnet-templates-10.0","product":"dotnet-templates-10.0 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet-templates-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_8:aspnetcore-targeting-pack-10.0","product":"aspnetcore-targeting-pack-10.0 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/aspnetcore-targeting-pack-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_8:dotnet-hostfxr-10.0","product":"dotnet-hostfxr-10.0 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet-hostfxr-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_8:dotnet-sdk-10.0-source-built-artifacts","product":"dotnet-sdk-10.0-source-built-artifacts as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet-sdk-10.0-source-built-artifacts","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_8:dotnet-templates-10.0","product":"dotnet-templates-10.0 as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet-templates-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_9:aspnetcore-targeting-pack-10.0","product":"aspnetcore-targeting-pack-10.0 as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/aspnetcore-targeting-pack-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_9:dotnet-runtime-dbg-10.0","product":"dotnet-runtime-dbg-10.0 as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet-runtime-dbg-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_enterprise_linux_9:dotnet-sdk-dbg-10.0","product":"dotnet-sdk-dbg-10.0 as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet-sdk-dbg-10.0","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"red_hat_hardened_images:dotnet10.0.src","product":"dotnet10.0.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"workaround","details":"Deploy reverse-proxy rate limiting and request timeout thresholds to drop abnormally slow or complex incoming network requests before they reach the backend .NET service. Enforce CPU and memory cgroup limits on application containers to isolate resource exhaustion to the impacted service."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/dotnet10.0?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64","product":"aspnetcore-runtime-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/aspnetcore-runtime-8.0@8.0.32-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64","product":"aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.32-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64","product":"aspnetcore-runtime-dbg-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/aspnetcore-runtime-dbg-8.0@8.0.32-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64","product":"aspnetcore-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/aspnetcore-targeting-pack-8.0@8.0.32-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64","product":"dotnet-apphost-pack-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dotnet-apphost-pack-8.0@8.0.32-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64","product":"dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.32-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64","product":"dotnet-hostfxr-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dotnet-hostfxr-8.0@8.0.32-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64","product":"dotnet-runtime-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dotnet-runtime-8.0@8.0.32-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64","product":"dotnet-runtime-dbg-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dotnet-runtime-dbg-8.0@8.0.32-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64","product":"dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.32-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]},{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json","productId":"Red Hat Hardened Images:dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64","product":"dotnet-targeting-pack-8.0-0:8.0.32-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/dotnet-targeting-pack-8.0@8.0.32-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-84008","modified":"2026-10-24T02:51:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-84008.json"}]}],"vendorCoverage":{"total":72,"shown":32,"omitted":40,"source":"redhat"}}