CVE-2026-26130

highpriority · track · 1EPSS 0.030 · 87 %ileCHDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.99% (87th) EPSS

CVSS 7.5 · high

Is it mine?

84 products

Check your exposure

Who says so?

9 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedaspnetcore-runtime-9.0-0:9.0.14-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-9.0-0:9.0.14-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-9.0-0:9.0.14-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-9.0-0:9.0.14-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-9.0-0:9.0.14-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-9.0-0:9.0.14-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-9.0-0:9.0.14-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-9.0-0:9.0.115-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-9.0-source-built-artifacts-0:9.0.115-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-aot-9.0-0:9.0.115-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-9.0-0:9.0.115-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-9.0-0:9.0.14-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-9.0-0:9.0.115-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixednetstandard-targeting-pack-2.1-0:9.0.115-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-10.0-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-10.0-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-10.0-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-10.0-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-host-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-10.0-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-10.0-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-10.0-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-10.0-0:10.0.104-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-10.0-source-built-artifacts-0:10.0.104-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-aot-10.0-0:10.0.104-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-10.0-0:10.0.104-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-10.0-0:10.0.4-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-10.0-0:10.0.104-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-9.0-0:9.0.14-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-9.0-0:9.0.14-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-9.0-0:9.0.14-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-9.0-0:9.0.14-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-9.0-0:9.0.14-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-9.0-0:9.0.14-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-9.0-0:9.0.14-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-9.0-0:9.0.115-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-9.0-source-built-artifacts-0:9.0.115-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-aot-9.0-0:9.0.115-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-9.0-0:9.0.115-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-9.0-0:9.0.14-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-9.0-0:9.0.115-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixednetstandard-targeting-pack-2.1-0:9.0.115-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-8.0-0:8.0.25-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-8.0-0:8.0.25-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-8.0-0:8.0.25-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-8.0-0:8.0.25-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-8.0-0:8.0.25-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-8.0-0:8.0.25-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-8.0-0:8.0.25-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-8.0-0:8.0.125-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-8.0-source-built-artifacts-0:8.0.125-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-8.0-0:8.0.125-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-8.0-0:8.0.25-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-8.0-0:8.0.125-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-10.0-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-10.0-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-10.0-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-10.0-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-host-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-10.0-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-10.0-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-10.0-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-10.0-0:10.0.104-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-10.0-source-built-artifacts-0:10.0.104-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-aot-10.0-0:10.0.104-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-10.0-0:10.0.104-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-10.0-0:10.0.4-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-10.0-0:10.0.104-1.el10_1.x86_64 as component of SUSE Liberty Linux 10suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-8.0-0:8.0.25-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-8.0-0:8.0.25-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-8.0-0:8.0.25-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-8.0-0:8.0.25-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-8.0-0:8.0.25-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-8.0-0:8.0.25-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-8.0-0:8.0.25-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-8.0-0:8.0.125-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-8.0-source-built-artifacts-0:8.0.125-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-8.0-0:8.0.125-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-8.0-0:8.0.25-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-8.0-0:8.0.125-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-8.0-0:8.0.25-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-8.0-0:8.0.25-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-8.0-0:8.0.25-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-8.0-0:8.0.25-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-8.0-0:8.0.25-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-8.0-0:8.0.25-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-8.0-0:8.0.25-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-8.0-0:8.0.125-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-8.0-source-built-artifacts-0:8.0.125-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-8.0-0:8.0.125-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-8.0-0:8.0.25-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-8.0-0:8.0.125-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-9.0-0:9.0.14-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-9.0-0:9.0.14-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-9.0-0:9.0.14-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-9.0-0:9.0.14-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-9.0-0:9.0.14-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-9.0-0:9.0.14-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-9.0-0:9.0.14-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-9.0-0:9.0.115-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-9.0-source-built-artifacts-0:9.0.115-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-aot-9.0-0:9.0.115-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-9.0-0:9.0.115-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-9.0-0:9.0.14-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-9.0-0:9.0.115-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixednetstandard-targeting-pack-2.1-0:9.0.115-1.el9_7.x86_64 as component of SUSE Liberty Linux 9suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-10.0-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-runtime-dbg-10.0-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedaspnetcore-targeting-pack-10.0-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-0:10.0.104-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-apphost-pack-10.0-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-host-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-hostfxr-10.0-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-10.0-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-runtime-dbg-10.0-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-10.0-0:10.0.104-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-10.0-source-built-artifacts-0:10.0.104-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-aot-10.0-0:10.0.104-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-sdk-dbg-10.0-0:10.0.104-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-targeting-pack-10.0-0:10.0.4-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddotnet-templates-10.0-0:10.0.104-1.el8_10.x86_64 as component of SUSE Liberty Linux 8suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
FixedLabX Standardmettler_toledo_psirt
Update to LabX Standard v21.4.23
FixedASP.NET Core 10.0msrc_csaf
10.0.4:Security Update:https://support.microsoft.com/help/5081276
https://support.microsoft.com/help/5081276
FixedASP.NET Core 8.0msrc_csaf
8.0.25:Security Update:https://support.microsoft.com/help/5081277
https://support.microsoft.com/help/5081277
FixedASP.NET Core 9.0msrc_csaf
9.0.14:Security Update:https://support.microsoft.com/help/5081278
https://support.microsoft.com/help/5081278

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:Csecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · secure@microsoft.com USexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondaryexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · OSV

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Mettler-Toledo PSIRT

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:Csecondary · NCSC-NL NL

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:Csecondary · Microsoft Security Response Center US

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-770USCWE-770USCWE-770USCWE-770USCWE-770USCWE-770US

affected products (84)

Products and version ranges known to be affected.

Microsoft .NET 10.0all versionscert_bundDEcpe:/a:microsoft:.net:10.0
Microsoft .NET 9.0all versionscert_bundDEcpe:/a:microsoft:.net:9.0
Microsoft ASP.NET Core 10.0all versionscert_bundDEcpe:/a:microsoft:asp.net:core_10.0
Microsoft ASP.NET Core 8.0all versionscert_bundDEcpe:/a:microsoft:asp.net:core_8.0
Microsoft ASP.NET Core 9.0all versionscert_bundDEcpe:/a:microsoft:asp.net:core_9.0
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Microsoft ASP.NET Core 10.010.0 → 10.0.4enisa_euvdEU
Microsoft ASP.NET Core 8.08.0 → 8.0.25enisa_euvdEU
Microsoft ASP.NET Core 9.09.0 → 9.0.14enisa_euvdEU
Microsoft Corp ASP.NET Core10.0 → 10.0.4fstec_bduRU
Microsoft Corp ASP.NET Core8.0 → 8.0.25fstec_bduRU
Microsoft Corp ASP.NET Core9.0 → 9.0.14fstec_bduRU
ООО «Ред Софт» РЕД ОС≤ 8.0fstec_bduRU
LabX Standardall versionsfixedmettler_toledo_psirtCHcpe:2.3:a:mettler_toledo:labx_standard:21.4.23:*:*:*:*:*:*:*
LabX Standardall versionsmettler_toledo_psirtCHcpe:2.3:a:mettler_toledo:labx_standard:21.3.22:*:*:*:*:*:*:*
Microsoft ASP.NET Core 10.0all versionsfixedmsrc_csafUS
Microsoft ASP.NET Core 10.0< 10.0.4msrc_csafUS

showing 20 of 84

advisories (15)

Vendor and ecosystem advisories describing this.

NCSC-2026-0085Kwetsbaarheden verholpen in Microsoft Developer toolsNL2026-03-10csaf · ncsc_nlNL
Microsoft heeft kwetsbaarheden verholpen in .NET en PowerShell.
RHSA-2026:4443security update for dotnet9.02026-03-12csaf · suse_csafDE
security update for dotnet9.0
RHSA-2026:4445security update for dotnet10.02026-03-12csaf · suse_csafDE
security update for dotnet10.0
RHSA-2026:4450security update for dotnet9.02026-03-12csaf · suse_csafDE
security update for dotnet9.0
RHSA-2026:4451security update for dotnet8.02026-03-12csaf · suse_csafDE
security update for dotnet8.0
RHSA-2026:4453security update for dotnet10.02026-03-12csaf · suse_csafDE
security update for dotnet10.0
RHSA-2026:4454security update for dotnet8.02026-03-12csaf · suse_csafDE
security update for dotnet8.0
RHSA-2026:4455security update for dotnet8.02026-03-12csaf · suse_csafDE
security update for dotnet8.0
RHSA-2026:4456security update for dotnet9.02026-03-12csaf · suse_csafDE
security update for dotnet9.0
RHSA-2026:4458security update for dotnet10.02026-03-12csaf · suse_csafDE
security update for dotnet10.0
VDE-2026-064METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.32026-06-09csaf · mettler_toledo_psirtCH
Multiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases. Notice: LabX Standard was formerly known as LabX Cloud Local.
WID-SEC-W-2026-0657Microsoft ASP.NET und .NET: Mehrere SchwachstellenDeutsch2026-03-10csaf · cert_bundDE
Ein lokaler. oder ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft ASP.NET und Microsoft .NET ausnutzen, um Administratorrechte zu erlangen oder um einen Denial-of-Service-Zustand zu verursachen.
msrc_CVE-2026-26130ASP.NET Core Denial of Service Vulnerability2026-03-10csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle
GHSA-4vgm-c2wm-63mw.NET Denial of Service Vulnerability2026-03-11ghsa · osvUS
# Microsoft Security Advisory CVE-2026-26130 – .NET Denial of Service Vulnerability ## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0, .NET 9.0, and .NET 10.0. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial of service vulnerability exists in ASP.NET Core due to uncontrolled resource consumption. A specially crafted message to a SignalR server can exhaust an internal buffer and cause a Denial of Service. ## Announcement Announcement for this issue can be found at https://github.com/dotnet/announcements/issues/385 ## CVSS Details - **Version:** 3.1 - **Score:** 7.5 - **Vector:** `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C` - **Severity:** High - **Weakness:** CWE-770 (Uncontrolled Resource Consumption) ## Affected Platforms - **Platforms:** All - **Architectures:** All ## Affected Products ### <a name=".NET 8"></a>.NET 8 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm) | >= 8.0.0, < =8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64) | >= 8.0.0, < =8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm) | >= 8.0.0, <= 8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64) | >= 8.0.0, <= 8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64) | >= 8.0.0, < =8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64) | >= 8.0.0, < =8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64) | >= 8.0.0, < =8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64) | >= 8.0.0, <= 8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm) | >= 8.0.0, <= 8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64) | >= 8.0.0, <= 8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64) | >= 8.0.0, < =8.0.24 | 8.0.25 [Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86) | >= 8.0.0, <= 8.0.24 | 8.0.25 ### <a name=".NET 9"></a>.NET 9 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm) | >= 9.0.0, < =9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64) | >= 9.0.0, < =9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm) | >= 9.0.0, <= 9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64) | >= 9.0.0, <= 9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64) | >= 9.0.0, < =9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64) | >= 9.0.0, < =9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64) | >= 9.0.0, < =9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64) | >= 9.0.0, < =9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm) | >= 9.0.0, <= 9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64) | >= 9.0.0, < =9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64) | >= 9.0.0, <= 9.0.13 | 9.0.14 [Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86) | >= 9.0.0, <= 9.0.13 | 9.0.14 ### <a name=".NET 10"></a>.NET 10 Package name | Affected version | Patched version ------------ | ---------------- | ------------------------- [Microsoft.AspNetCore.App.Runtime.linux-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm) | >= 10.0.0, < =10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.linux-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-arm64) | >= 10.0.0, <= 10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm) | >= 10.0.0, < =10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.linux-musl-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-arm64) | >= 10.0.0, < =10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.linux-musl-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-musl-x64) | >= 10.0.0, < =10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.linux-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.linux-x64) | >= 10.0.0, < =10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.osx-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-arm64) | >= 10.0.0, < =10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.osx-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.osx-x64) | >= 10.0.0, < =10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.win-arm](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm) | >= 10.0.0, < =10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.win-arm64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-arm64) | >= 10.0.0, <= 10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.win-x64](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x64) | >= 10.0.0, <= 10.0.3 | 10.0.4 [Microsoft.AspNetCore.App.Runtime.win-x86](https://www.nuget.org/packages/Microsoft.AspNetCore.App.Runtime.win-x86) | >= 10.0.0, <= 10.0.3 | 10.0.4 ## Advisory FAQ ### <a name="how-affected"></a>How do I know if I am affected? If using an affected package listed in [affected products](#affected-products) or [affected packages](#affected-packages), you're exposed to the vulnerability. ### <a name="how-fix"></a>How do I fix the issue? 1. To fix the issue please install the latest version of .NET 8.0, NET 9.0, or .NET 10.0, as appropriate. If you have installed one or more .NET SDKs through Visual Studio, Visual Studio will prompt you to update Visual Studio, which will also update your .NET SDKs. 2. If your application references the vulnerable package, update the package reference to the patched version. You can list the versions you have installed by running the `dotnet --info` command. Once you have installed the updated runtime or SDK, restart your apps for the update to take effect. Additionally, if you've deployed [self-contained applications](https://docs.microsoft.com/dotnet/core/deploying/#self-contained-deployments-scd) targeting any of the impacted versions, these applications are also vulnerable and must be recompiled and redeployed. ## Other Information ### Reporting Security Issues If you have found a potential security issue in a supported version of .NET, please report it to the Microsoft Security Response Center (MSRC) via the [MSRC Researcher Portal](https://msrc.microsoft.com/report/vulnerability/new). Further information can be found in the MSRC [Report an Issue FAQ](https://www.microsoft.com/msrc/faqs-report-an-issue). Security reports made through MSRC may qualify for the Microsoft .NET Bounty. Details of the Microsoft .NET Bounty Program including terms and conditions are at https://aka.ms/corebounty. ### Support You can ask questions about this issue on GitHub in the .NET GitHub organization. The main repos are located at https://github.com/dotnet/runtime. The Announcements repo (https://github.com/dotnet/Announcements) will contain this bulletin as an issue and will include a link to a discussion issue. You can ask questions in the linked discussion issue. ### Disclaimer The information provided in this advisory is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. ### External Links [CVE-2026-26130]( https://www.cve.org/CVERecord?id=CVE-2026-26130) ### Acknowledgements Bartłomiej Dach ### Revisions V1.0 (March 10, 2026): Advisory published.
BIT-aspnet-core-2026-26130ASP.NET Core Denial of Service Vulnerability2026-04-06vendor · osvUS
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund mettler_toledo_psirt msrc_csaf ncsc_nl suse_csaf NVD CVE.org MITRE

published 2026-03-10modified 2026-07-15

references (20)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan