CVE record · 2 sources
CVE-2026-118741
CVSS 8.1Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
- Vendor
- Microsoft
- Product
- Microsoft.dotnet-scaffold, Microsoft.dotnet-scaffold-aspnet, Microsoft.DotNet.Web.ProjectTemplates.10.0, Microsoft.DotNet.Web.ProjectTemplates.8.0
- CVSS v3.1
- 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-640
- Exposure class
- Developer platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ASP.NET Core Elevation of Privilege Vulnerability
Changes made to the security updates links and information. This is an informational change only.
-
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.