GHSA-387c-qmrw-59qv
High · 7.8Duplicate Advisory: Microsoft Security Advisory CVE-2026-26131 – .NET Elevation of Privilege Vulnerability
CVSS
7.8
EPSS
—
Published
Mar 10, 2026
CISA due date
—
The record
### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-crjq-wm6x-6qx7. This link is maintained to preserve external references. ### Original Description Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-11813 A potential improper permissions vulnerability was reported in the Lenovo Filez Client… CWE-276
- CVE-2026-52766 YesWiki is a wiki system written in PHP. CWE-276
- CVE-2026-77393 In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped… CWE-276
- CVE-2026-75166 Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05… CWE-276
- CVE-2026-81302 PALLET CONTROL products contain an incorrect default permission vulnerability, which may… CWE-276
- CVE-2026-9634 A security issue exists within the Redundancy Module Configuration Tool. CWE-276
- CVE-2026-9633 A security issue exists within the Redundancy Module Configuration Tool. CWE-276
- CVE-2026-69665 SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default… CWE-276