Overview
What is CVE-2026-62902?
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
Vulnerability intelligence
CVE-2026-62902 and is rated Medium severity with a CVSS score of 6.5. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.