CWE-166

Improper Handling of Missing Special Element

1 CVEs Avg CVSS 7.5 MITRE
0
CRITICAL
1
HIGH
0
MEDIUM
0
LOW
0
POC
0
KEV

Monthly

CVE-2026-21218 HIGH PATCH This Week

.NET applications are vulnerable to spoofing attacks due to improper validation of a required security element, allowing unauthenticated remote attackers to forge or manipulate application data over the network. This vulnerability affects multiple .NET versions and currently has no available patch, exposing organizations to authentication bypass and data integrity risks. The attack requires no user interaction and can be exploited directly from the network.

Dotnet .Net
NVD
CVSS 3.1
7.5
EPSS
0.0%
CVE-2026-21218
EPSS 0% CVSS 7.5
HIGH PATCH This Week

.NET applications are vulnerable to spoofing attacks due to improper validation of a required security element, allowing unauthenticated remote attackers to forge or manipulate application data over the network. This vulnerability affects multiple .NET versions and currently has no available patch, exposing organizations to authentication bypass and data integrity risks. The attack requires no user interaction and can be exploited directly from the network.

Dotnet .Net
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy