Microsoft Microsoft.AspNetCore.Http.Connections vulnerabilities (CVE)

CVE records published for Microsoft Microsoft.AspNetCore.Http.Connections, newest first. Follow to get an email when a new one appears.

1 results
9.0Critical
CVE-2026-114146

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft .NET 10.0 installed on Linux; Microsoft .NET 10.0 installed on Mac OS; Microsoft .NET 10.0 installed on Windows; Microsoft .NET 11.0 installed on Linux

Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.