CVE-2026-50659
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Published Jul 14, 2026 · updated Oct 14, 2026 · microsoft .net framework
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jul 14, 2026 · NIST NVD
Detected
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Oct 14, 2026 · NIST NVD
Updated
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
Affected
- cpe microsoft/.netversion unspecified
- cpe microsoft/.net framework3.5
- cpe microsoft/.net framework4.6.2
- cpe microsoft/.net framework4.7
- cpe microsoft/.net framework4.7.1
- cpe microsoft/.net framework4.7.2
- cpe microsoft/.net framework4.8
- cpe microsoft/.net framework4.8.1
Sources
- CVE.orgVulnerability recordCVE-2026-50659
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-50659
30-day exploitation probability 0.7%
first.org - NIST NVDVulnerability recordCVE-2026-50659
Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.
nvd.nist.gov