External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3111 advisory.

    Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
    (CVE-2026-58649)

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
    (CVE-2026-62886)

    External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a     network. (CVE-2026-69805)

    Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to     elevate privileges locally. (CVE-2026-69806)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3113 advisory.

    Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
    (CVE-2026-58649)

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
    (CVE-2026-62886)

    External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a     network. (CVE-2026-69805)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3114 advisory.

    Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
    (CVE-2026-58649)

    Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
    (CVE-2026-62886)

    External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a     network. (CVE-2026-69805)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges     over a network. (CVE-2026-69439)

  - Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a     network. (CVE-2026-69522, CVE-2026-71328)

  - External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a     network. (CVE-2026-69805)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
373050	Amazon Linux 2023 : aspnetcore-runtime-10.0, aspnetcore-runtime-dbg-10.0, aspnetcore-targeting-pack-10.0 (ALAS2023-2026-3111)	Nessus	Amazon Linux Local Security Checks	Local	high
373049	Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-3113)	Nessus	Amazon Linux Local Security Checks	Local	high
351060	Amazon Linux 2023 : aspnetcore-runtime-8.0, aspnetcore-runtime-dbg-8.0, aspnetcore-targeting-pack-8.0 (ALAS2023-2026-3114)	Nessus	Amazon Linux Local Security Checks	Local	high
344292	Microsoft Visual Studio Products (September 2026)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2026-69805

high

Tenable Plugins

high

high

high

high