CVE-2026-50659
Medium · 6.5CVSS
6.5
EPSS
0.7%
Published
Jul 14, 2026
CISA due date
—
The record
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63346 Refitter is a tool for generating a C# REST API client using the Refit library. CWE-116
- CVE-2026-63344 Refitter is a tool for generating a C# REST API client using the Refit library. CWE-116
- CVE-2026-104368 The Export and Import Users and Customers plugin for WordPress is vulnerable to Privilege… CWE-116
- CVE-2026-118256 Vue I18n is the internationalization plugin for Vue.js. CWE-116
- CVE-2026-118257 Vue I18n is the internationalization plugin for Vue.js. CWE-116
- CVE-2026-110910 ### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array… CWE-116
- CVE-2026-116582 Seroval facilitates JavaScript value stringification, including complex structures beyond… CWE-116
- CVE-2026-55442 The Goobi viewer is a web application that allows digitised material to be displayed in a… CWE-116