Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized     attacker to disclose information over a network. (CVE-2026-62900)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory.

  - .NET Elevation of Privilege Vulnerability (CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909)

  - .NET Security Feature Bypass Vulnerability (CVE-2026-62899)

  - .NET Information Disclosure Vulnerability (CVE-2026-62900, CVE-2026-62902)

  - .NET Denial of Service Vulnerability (CVE-2026-62901)

  - .NET Core Remote Code Execution Vulnerability (CVE-2026-70354)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory.

  - .NET Elevation of Privilege Vulnerability (CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909)

  - .NET Security Feature Bypass Vulnerability (CVE-2026-62899)

  - .NET Information Disclosure Vulnerability (CVE-2026-62900, CVE-2026-62902)

  - .NET Denial of Service Vulnerability (CVE-2026-62901)

  - .NET Core Remote Code Execution Vulnerability (CVE-2026-70354)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
334652	Linux Distros Unpatched Vulnerability : CVE-2026-62900	Nessus	Misc.	Local	medium
334621	Security Update for Microsoft .NET Core SDK (August 2026)	Nessus	Windows	Local	high
334610	Security Update for Microsoft .NET Core (August 2026)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2026-62900

medium

Tenable Plugins

medium

high

high