Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HMicrosoft Asp.net Core
APPMicrosoft8.0.0 – 8.0.25 (bez)9.0.0 – 9.0.14 (bez)10.0.0 – 10.0.4 (bez)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
References
Related vulnerabilities
CVE-2026-40372CRITICAL9.1PL ✓ten sam produkt
ASP.NET Core — błąd weryfikacji podpisu kryptograficznego umożliwia privilege escalation
CVE-2025-55315CRITICAL9.9PL ✓ten sam produkt
HTTP Request Smuggling w ASP.NET Core umożliwia ominięcie zabezpieczeń
CVE-2023-38180HIGH7.5⚠ KEVten sam produkt
.NET and Visual Studio Denial of Service Vulnerability
CVE-2026-45591HIGH7.5ten sam produkt
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a netwo...
CVE-2025-26682HIGH7.5ten sam produkt
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s...