PatchSiren

dotnet CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM dotnet CVE published 2026-10-19

CVE-2026-112044

CVE-2026-112044 is a medium-severity vulnerability in dotnet eShop, specifically in the Catalog API's AddApplicationServices function. The issue is related to improper authentication and can be exploited remotely. The project has been informed but has not yet responded. This vulnerability affects the Catalog API component of dotnet eShop, potentially allowing unauthorized access. Defenders should assess t [truncated]