CVE record · 3 sources
CVE-2026-102870
CVSS 8.8Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
- Vendor
- Microsoft
- Product
- Visual Studio / .NET
- CVSS
- 8.8
- EPSS
- 0.009 (p60)
- Exposure class
- Developer platform
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
-
ASP.NET Core Remote Code Execution Vulnerability
Updated product information in the Software Update table. This is an informational change only.
-
.NET vulnerabilities
It was discovered that the .NET Blazor WebAssembly debug proxy did not properly escape certain values. An attacker could possibly use this issue to execute arbitrary code. The fix for this CVE was originally released via…