CVE-2026-26171

CVE-2026-26171 is an uncontrolled resource consumption vulnerability affecting .NET that allows unauthorized attackers to cause denial of service over a network without requiring authentication or user interaction. The vulnerability has a CVSS score of 7.5 (HIGH) with a network-based attack vector, low complexity, and no privilege requirements, resulting in high availability impact to affected systems. Current exploitation indicators suggest this vulnerability is not actively being exploited in the wild, as it does not appear on the CISA Known Exploited Vulnerabilities (KEV) catalog and remains on the inactive hot list. The EPSS score of 0.0056 indicates relatively low probability of exploitation compared to other published vulnerabilities, suggesting limited community attention and exploit availability at this time.