CVE record · 2 sources
CVE-2026-114156
CVSS 6.5Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
- Vendor
- Microsoft
- Product
- .NET 11.0 installed on Linux, .NET 11.0 installed on Mac OS, .NET 11.0 installed on Windows, Microsoft Visual Studio 2026 version 18.12
- CVSS v3.1
- 6.5 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
- Weakness
- CWE-41
- Exposure class
- Developer platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ASP.NET Core Security Feature Bypass Vulnerability
Changes made to the security updates links and information. This is an informational change only.
-
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.