by Kastro
Paper/Archive/CVE-2026-70188

CVE-2026-70188

Microsoft ASP.NET Core 10.0 — ASP.NET Core Security Feature Bypass Vulnerability

EPSS 0.9%CVSS 9.1
critical.is priorityof 100
40
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 60.8.608 × 2012.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Affected

ProductAffectedFixed inSource
ASP.NET Core 10.010.0 – < 10.0.1310.0.13CNA
ASP.NET Core 11.011.0 – < 11.0.0-rc.211.0.0-rc.2CNA
ASP.NET Core 8.08.0 – < 8.0.328.0.32CNA
ASP.NET Core 9.09.0 – < 9.0.219.0.21CNA
Microsoft Visual Studio 2022 version 17.1417.14.0 – < 17.14.4217.14.42CNA
Microsoft Visual Studio 2026 version 18.1018.10.0 – < 18.10.418.10.4CNA

Scores by source

microsoft (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

patchmsrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188