CVE-2026-56158
No scorePublic exploitFix available
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dotnet8-runtimeAlpaquita:25 |
8.0.17-r0 up to 8.0.29-r0 | 8.0.29-r0 |
dotnet8-runtimeAlpaquita:stream |
8.0.11-r1 up to 8.0.29-r0 | 8.0.29-r0 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | sam00/CVE-2026-56158-.NET-Framework-RCE-PoC-Exploit | 2026-08-03 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-56158 is a vulnerability with no CVSS score yet in dotnet8-runtime, published July 23, 2026. Public exploit code exists. Fixed in dotnet8-runtime 8.0.29-r0.