# RHSA-2026:86170: Security update for 14 packages RHSA-2026:86170, released October 21, 2026, fixes 24 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/rhsa-2026-86170 - Platform: Linux - Released: Oct 21, 2026 - Priority: Urgent (Closes CVE-2026-92707, rated Critical) - CVEs: 24, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://access.redhat.com/errata/RHSA-2026:86170 ## Applies to | Product | Release | Fixed in | |---|---|---| | [aspnetcore-runtime-9.0](https://patchblox.com/security/data/product/linux/aspnetcore-runtime-9.0.md) | RHEL 8 | 0:9.0.21-1.el8_10 | | [aspnetcore-runtime-dbg-9.0](https://patchblox.com/security/data/product/linux/aspnetcore-runtime-dbg-9.0.md) | RHEL 8 | 0:9.0.21-1.el8_10 | | [aspnetcore-targeting-pack-9.0](https://patchblox.com/security/data/product/linux/aspnetcore-targeting-pack-9.0.md) | RHEL 8 | 0:9.0.21-1.el8_10 | | [dotnet-apphost-pack-9.0](https://patchblox.com/security/data/product/linux/dotnet-apphost-pack-9.0.md) | RHEL 8 | 0:9.0.21-1.el8_10 | | [dotnet-hostfxr-9.0](https://patchblox.com/security/data/product/linux/dotnet-hostfxr-9.0.md) | RHEL 8 | 0:9.0.21-1.el8_10 | | [dotnet-runtime-9.0](https://patchblox.com/security/data/product/linux/dotnet-runtime-9.0.md) | RHEL 8 | 0:9.0.21-1.el8_10 | | [dotnet-runtime-dbg-9.0](https://patchblox.com/security/data/product/linux/dotnet-runtime-dbg-9.0.md) | RHEL 8 | 0:9.0.21-1.el8_10 | | [dotnet-sdk-9.0](https://patchblox.com/security/data/product/linux/dotnet-sdk-9.0.md) | RHEL 8 | 0:9.0.122-1.el8_10 | | [dotnet-sdk-9.0-source-built-artifacts](https://patchblox.com/security/data/product/linux/dotnet-sdk-9.0-source-built-artifacts.md) | RHEL 8 | 0:9.0.122-1.el8_10 | | [dotnet-sdk-aot-9.0](https://patchblox.com/security/data/product/linux/dotnet-sdk-aot-9.0.md) | RHEL 8 | 0:9.0.122-1.el8_10 | | [dotnet-sdk-dbg-9.0](https://patchblox.com/security/data/product/linux/dotnet-sdk-dbg-9.0.md) | RHEL 8 | 0:9.0.122-1.el8_10 | | [dotnet-targeting-pack-9.0](https://patchblox.com/security/data/product/linux/dotnet-targeting-pack-9.0.md) | RHEL 8 | 0:9.0.21-1.el8_10 | | [dotnet-templates-9.0](https://patchblox.com/security/data/product/linux/dotnet-templates-9.0.md) | RHEL 8 | 0:9.0.122-1.el8_10 | | [netstandard-targeting-pack-2.1](https://patchblox.com/security/data/product/linux/netstandard-targeting-pack-2.1.md) | RHEL 8 | 0:9.0.122-1.el8_10 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-92707](https://patchblox.com/security/data/cve/CVE-2026-92707.md) | Urgent | MessagePack-CSharp Denial of Service Vulnerability | 9.4 | 0.0068 | Disclosed | | [CVE-2026-58280](https://patchblox.com/security/data/cve/CVE-2026-58280.md) | High | .NET Denial of Service Vulnerability | 9.4 | 0.0125 | | | [CVE-2026-69651](https://patchblox.com/security/data/cve/CVE-2026-69651.md) | High | .NET Denial of Service Vulnerability | 9.4 | 0.0125 | | | [CVE-2026-70159](https://patchblox.com/security/data/cve/CVE-2026-70159.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0123 | | | [CVE-2026-70181](https://patchblox.com/security/data/cve/CVE-2026-70181.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0123 | | | [CVE-2026-96958](https://patchblox.com/security/data/cve/CVE-2026-96958.md) | High | .NET Denial of Service Vulnerability | 7.5 | 0.0120 | | | [CVE-2026-96960](https://patchblox.com/security/data/cve/CVE-2026-96960.md) | High | .NET Denial of Service Vulnerability | 7.5 | 0.0120 | | | [CVE-2026-96236](https://patchblox.com/security/data/cve/CVE-2026-96236.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0109 | | | [CVE-2026-96233](https://patchblox.com/security/data/cve/CVE-2026-96233.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0099 | | | [CVE-2026-84008](https://patchblox.com/security/data/cve/CVE-2026-84008.md) | High | .NET Denial of Service Vulnerability | 7.5 | 0.0099 | | | [CVE-2026-96959](https://patchblox.com/security/data/cve/CVE-2026-96959.md) | High | .NET Denial of Service Vulnerability | 7.5 | 0.0097 | | | [CVE-2026-70186](https://patchblox.com/security/data/cve/CVE-2026-70186.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0096 | | | [CVE-2026-96230](https://patchblox.com/security/data/cve/CVE-2026-96230.md) | High | ASP.NET Core Remote Code Execution Vulnerability | 9.4 | 0.0095 | | | [CVE-2026-70188](https://patchblox.com/security/data/cve/CVE-2026-70188.md) | High | ASP.NET Core Security Feature Bypass Vulnerability | 9.4 | 0.0094 | | | [CVE-2026-88092](https://patchblox.com/security/data/cve/CVE-2026-88092.md) | High | ASP.NET Core Tampering Vulnerability | 9.4 | 0.0093 | | | [CVE-2026-70196](https://patchblox.com/security/data/cve/CVE-2026-70196.md) | High | ASP.NET Core Denial of Service Vulnerability | 9.4 | 0.0091 | | | [CVE-2026-66822](https://patchblox.com/security/data/cve/CVE-2026-66822.md) | High | .NET Information Disclosure Vulnerability | 9.4 | 0.0079 | | | [CVE-2026-70175](https://patchblox.com/security/data/cve/CVE-2026-70175.md) | High | ASP.NET Core Elevation of Privilege Vulnerability | 9.4 | 0.0073 | | | [CVE-2026-96237](https://patchblox.com/security/data/cve/CVE-2026-96237.md) | High | .NET Remote Code Execution Vulnerability | 9.4 | 0.0064 | | | [CVE-2026-70179](https://patchblox.com/security/data/cve/CVE-2026-70179.md) | High | ASP.NET Core Elevation of Privilege Vulnerability | 9.4 | 0.0063 | | | [CVE-2026-70183](https://patchblox.com/security/data/cve/CVE-2026-70183.md) | High | ASP.NET Core Elevation of Privilege Vulnerability | 9.4 | 0.0053 | | | [CVE-2026-96225](https://patchblox.com/security/data/cve/CVE-2026-96225.md) | High | .NET Elevation of Privilege Vulnerability | 9.4 | 0.0041 | | | [CVE-2026-96231](https://patchblox.com/security/data/cve/CVE-2026-96231.md) | High | .NET Elevation of Privilege Vulnerability | 9.4 | 0.0041 | | | [CVE-2026-96238](https://patchblox.com/security/data/cve/CVE-2026-96238.md) | High | .NET Security Feature Bypass Vulnerability | 9.4 | 0.0030 | | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo