C# is a general-purpose, multi-paradigm programming language encompassing strong typing, lexically scoped, imperative, declarative, functional, generic, object-oriented (class-based), and component-oriented programming disciplines.

ASP.NET Core is a free, open-source, and cross-platform web development framework developed by Microsoft. It allows developers to build modern, cloud-based, and internet-connected applications such as web apps, IoT apps, and mobile backends. ASP.NET Core provides a modular and high-performance environment for creating web applications and services that can run on Windows, macOS, and Linux.

ASP.NET Core

Rocky Linux is a Linux distribution intended to be a downstream, complete binary-compatible release using the Red Hat Enterprise Linux operating system source code. The project's aim is to provide a community-supported, production-grade enterprise operating system.

Rocky Linux

AlmaLinux OS is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release. AlmaLinux OS is a 1:1 binary compatible fork of RHEL®, guided and built by the community.

Alma Linux

Wolfi is a community Linux OS designed for the container and cloud-native era; it is a Linux distribution based on Alpine.

Wolfi

Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

.NET Core SDK is a set of libraries and tools that allow developers to create .NET Core applications and libraries. It includes the .NET Core runtime for running applications, but also provides additional capabilities for building, testing, and debugging .NET Core applications. The SDK also includes a command line interface (CLI) for performing various tasks such as project creation, code compilation, and package management.

.NET Core SDK

Ubuntu is a Linux distribution based on Debian, mostly composed of free and open-source software. Ubuntu is officially released in three editions: Desktop, Server, and Core for internet of things devices and robots. All the editions can run on the computer alone or in a virtual machine.

Linux Ubuntu

Red Hat Enterprise Linux is a Linux distribution developed by Red Hat for the commercial market.

Linux Red Hat

Alpine Linux is a Linux distribution based on musl and BusyBox, designed for security, simplicity, and resource efficiency.

Linux Alpine

Oracle Linux is a Linux distribution packaged and freely distributed by Oracle, available partially under the GNU General Public License since late 2006. It is compiled from Red Hat Enterprise Linux source code, replacing Red Hat branding with Oracle's.

Linux Oracle

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
GHSA-mvm6-f9r3-fgfx	HIGH	7.7	C#	AWSSDK.CloudFront	No	Yes	Mar 27, 2026
CVE-2026-33536	MEDIUM	5.1	C#	ImageMagick-doc	No	Yes	Mar 26, 2026
CVE-2026-33535	MEDIUM	4	C#	Magick.NET-Q16-HDRI-OpenMP-arm64	No	Yes	Mar 26, 2026
GHSA-9r56-3gjq-hqf7	LOW	3.3	C#	Magick.NET-Q16-HDRI-AnyCPU	No	Yes	Mar 26, 2026
GHSA-6p22-q7w5-33pg	LOW	3.3	C#	Magick.NET-Q8-OpenMP-arm64	No	Yes	Mar 26, 2026

CVE-2026-26127:
C# vulnerability analysis and mitigation

7.5

Related C# vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2026-26127: C# vulnerability analysis and mitigation