.NET 11.0.0-rc.2 is available for testing
.NET 11.0.0-rc.2 was released on 2026-10-13. It ships .NET Runtime 11.0.0-rc.2.26504.105, ASP.NET Core Runtime 11.0.0-rc.2.26504.105, SDK 11.0.100-rc.2.26504.105. The official release metadata lists 39 CVEs addressed in this release. .NET 11.0 is an STS release currently in the "go-live" support phase.
What was released From the source
According to Microsoft's official .NET release metadata, .NET 11.0.0-rc.2 was published on 2026-10-13. The components and versions in this release are:
- Release: .NET 11.0.0-rc.2
- Release date: 2026-10-13
- .NET Runtime: 11.0.0-rc.2.26504.105
- ASP.NET Core Runtime: 11.0.0-rc.2.26504.105
- SDK versions: 11.0.100-rc.2.26504.105
- C# language version: 14.0
- Release type: STS
- Support phase: Go-live (supported in production)
- Security release: Yes (39 CVEs listed)
At a glance · .NET release
Security fixes listed for this release From the source
The release metadata marks this as a security release and lists the following CVE identifiers. Severity, affected components and mitigations for each CVE are described in the official release notes and the CVE records.
- CVE-2026-66822
- CVE-2026-58280
- CVE-2026-69651
- CVE-2026-96958
- CVE-2026-96960
- CVE-2026-96959
- CVE-2026-84008
- CVE-2026-70174
- CVE-2026-87697
- CVE-2026-70035
- CVE-2026-83520
- CVE-2026-96229
- CVE-2026-96232
- CVE-2026-96234
- CVE-2026-70007
- CVE-2026-96224
- CVE-2026-96235
- CVE-2026-85363
- CVE-2026-96233
- CVE-2026-70161
- CVE-2026-70165
- CVE-2026-70190
- CVE-2026-96238
- CVE-2026-70159
- CVE-2026-105016
- CVE-2026-85790
- CVE-2026-70162
- CVE-2026-70183
- CVE-2026-88092
- CVE-2026-70188
- CVE-2026-96957
- CVE-2026-70194
- CVE-2026-96230
- CVE-2026-92707
- CVE-2026-96231
- CVE-2026-96225
- CVE-2026-70197
- CVE-2026-96236
- CVE-2026-102870
Why it matters Analysis
Previews and release candidates let teams test upcoming platform changes and report regressions before general availability. This channel is in the "go-live" phase, which Microsoft's support policy defines as supported for production use.
Who should care Analysis
- Teams running .NET 11.0 applications in production or testing
- Owners of container images built on .NET 11.0 base images
- Teams that publish self-contained or single-file applications
- Developers and CI pipelines that pin an SDK version in global.json
How to update Analysis
- Check installed versions with
dotnet --list-runtimesanddotnet --list-sdks. - Install the updated runtime or SDK 11.0.100-rc.2.26504.105 from the official download page or your operating system's package manager.
- If global.json pins an SDK version, update it to 11.0.100-rc.2.26504.105 or configure an appropriate rollForward policy.
- Rebuild container images so they pick up the updated base image, and rebuild self-contained apps.
- Read the release notes for known issues and run your test suite before rolling out to production.
Sources and further reading
- .NET 11.0.0-rc.2 release notes (original source)
- .NET 11.0 release metadata (JSON) (official)
- Download .NET 11.0 (official)
- .NET support policy (documentation)
Original: “.NET 11.0.0-rc.2 released with 39 security fixes”, .NET release metadata, published 13 Oct 2026, retrieved 16 Oct 2026. This article was generated from the official source using our structured templates and passed automated quality checks. Spotted a mistake? See our corrections policy.