Is Messaging Gateway vulnerable to CVE-2026-32226?
Article ID: 442732
Updated On:
Products
Issue/Introduction
Security teams may report concerns regarding vulnerability scans or security advisories identifying CVE-2026-32226.
This CVE describes a concurrent execution vulnerability (race condition) in the Microsoft .NET Framework that could allow an unauthorized attacker to cause a Denial of Service (DoS) over a network
Environment
- Version: 10.8.x, 10.9.x
- Deployment: Virtual and Physical)
Resolution
Symantec Messaging Gateway is NOT vulnerable to CVE-2026-32226.
SMG is a hardened, Linux-based security appliance. The product's architecture does not utilize the Microsoft .NET Framework, C#, or ASP.NET Core components. Because the affected software framework is not present on the SMG appliance, the vulnerability cannot be exploited.
No actions, configuration changes, or patches are required for Messaging Gateway in response to this CVE.
Additional Information
Feedback
