CVE-2026-70035

Summary

This CVE describes a critical deserialization vulnerability in .NET Framework that allows remote code execution when untrusted data is processed. An attacker can exploit this to execute arbitrary code on a target system without authentication.

Exploitability

Exploitation is relatively straightforward with minimal preconditions, requiring only network access to a vulnerable .NET application that processes untrusted serialized data.

Blast radius

The impact could be severe across many enterprise environments as .NET Framework is widely used for web applications and services, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to .NET Framework 4.8.1 or later, or apply the relevant security update from Microsoft.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.