{"id":"CVE-2026-96957","published":"2026-10-13T19:22:08.267","lastModified":"2026-10-16T19:32:50.200","description":"Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-347"],"vendors":["microsoft","apple","linux"],"products":[".net","macos","linux kernel","windows","visual studio 2022","visual studio 2026"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96957","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows attackers to bypass cryptographic signature verification in .NET applications, enabling them to forge or manipulate signed data over the network without proper authentication. This creates a significant security gap where malicious actors can exploit trust relationships established through digital signatures.","exploitability":"Exploitation requires a network-based attack against a vulnerable .NET application with minimal preconditions, making it moderately difficult to execute but highly impactful once successful.","blast_radius":"If exploited, this flaw could affect numerous enterprise applications and services running on Windows, macOS, Linux, and Visual Studio 2022 environments that rely on .NET cryptographic signatures, potentially leading to widespread authentication bypasses and data manipulation across multiple systems.","remediation":"Apply the latest .NET Framework security updates from Microsoft, specifically targeting versions affected by CVE-2026-96957, or upgrade to .NET 8.0.100 or later if available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["signature-bypass","dotnet","crypto"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:19:03.256Z"}}