HarborGuard / CVE
Back to search
HIGHCVE-2026-26130Published Modified CNA microsoft

CVE-2026-26130: ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Metrics

CVSS v3.1
7.5
Severity
HIGH
Fixed in
8.0.25
Affected Products
3

Fix available

8.0.259.0.1410.0.4
Patch commits
Affected packages
  • Microsoft / ASP.NET Core 10.0
    < 10.0.4 (from 10.0)
  • Microsoft / ASP.NET Core 8.0
    < 8.0.25 (from 8.0)
  • Microsoft / ASP.NET Core 9.0
    < 9.0.14 (from 9.0)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
References
CVE-2026-26130: ASP.NET Core Denial of Service Vulnerability | HarborGuard CVE