Net CVE-2026-40198

Memory corruption in Go's net library (versions <1.25.10 and 1.26.0-1.26.2) leads to application crash when parsing mali

Local file tampering via symlink/junction following in Microsoft .NET runtimes 8.0, 9.0, and 10.0 allows a local unauthe

Weak PRNG in Net::NSCA::Client through 0.009002 for Perl. Patch available.

Metric injection in the Perl module Net::Statsite::Client through version 1.1.0 allows attackers controlling metric name

Remote denial of service in ASP.NET Core enables unauthenticated network attackers to exhaust server resources and disru

Local privilege escalation in Microsoft .NET allows an authenticated low-privileged user to elevate to higher privileges

External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized att

Denial of service in the Perl module Net::CIDR::Set through version 0.20 allows remote unauthenticated attackers to trig

Net::BitTorrent versions through 2.0.1 for Perl allow remote memory exhaustion via deeply nested bencoded input. bdecod

Remote memory exhaustion in the Net::BitTorrent Perl module (all versions through 2.0.1) lets any unauthenticated peer i

Net::CIDR::Lite Perl module versions before 0.24 fail to properly validate IP address and CIDR mask inputs, allowing att

Metric name injection in Net::Async::Statsd::Client (Perl, versions through 0.005) allows network-reachable, unauthentic