CVE Catalog

CVE-2026-66822

MediumCVSS 5.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.67%

51th percentile - higher than 51% of all known CVEs

Summary

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

Risk Assessment

An unauthenticated network attacker could access confidential data transmitted by .NET applications, potentially breaching communication confidentiality.

Recommendation

Update the .NET runtime to the latest version and review applications for transmission of sensitive data.

Other vulnerabilities in .NET

See all
Original NVD description (English source)

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS