ROOT-APP-NUGET-CVE-2026-26171

See a problem?
Please try reporting it to the source first.
Source
https://root.io/security/ROOT-APP-NUGET-CVE-2026-26171
Import Source
https://api.root.io/external/osv/ROOT-APP-NUGET-CVE-2026-26171.json
JSON Data
https://api.test.osv.dev/v1/vulns/ROOT-APP-NUGET-CVE-2026-26171
Upstream
Published
2026-09-22T11:37:59Z
Modified
2026-09-22T12:15:03Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
CVE-2026-26171 in System.Security.Cryptography.Xml - Patched by Root
Details

Root has patched CVE-2026-26171 in the System.Security.Cryptography.Xml package for Root:NuGet. Multiple fixed versions available.

Database specific 
{
    "distro":  "nuget",
    "distro_version":  "",
    "severity":  "HIGH",
    "source":  "Root"
}

Affected packages

Root:NuGet / System.Security.Cryptography.Xml

Package

Name
System.Security.Cryptography.Xml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.0.0.416103

Database specific

all_fixed_versions 
[
    "8.0.0.416103"
]
root_patch_version 
"416103"
root_patched 
true
source 
"https://api.root.io/external/osv/ROOT-APP-NUGET-CVE-2026-26171.json"
total_fixed_versions 
1
upstream_version 
"8.0.0"

Root:NuGet / Rootio.System.Security.Cryptography.Xml

Package

Name
Rootio.System.Security.Cryptography.Xml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.0.0.120073
Fixed
8.0.0.416102
Fixed
8.0.0.120071

Database specific

all_fixed_versions 
[
    "8.0.0.120073",
    "8.0.0.416102",
    "8.0.0.120071"
]
root_patch_version 
"120073"
root_patched 
true
source 
"https://api.root.io/external/osv/ROOT-APP-NUGET-CVE-2026-26171.json"
total_fixed_versions 
3
upstream_version 
"8.0.0"