We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-5426

CVE-2026-5426

ASP.NET

Severity: —
CVSS: —CVSS
Published: 2026-04-16
Last modified: 2026-04-16
CWE: CWE-321CWE-502

Description

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks

References

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0009.md
https://www.digital-knowledge.co.jp/product/kd/

Summary

Description

References