CVE-2026-26130
ASP.NET Core Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
| Vendor | microsoft |
| Product | asp.net core 10.0 |
| Ecosystems | |
| Industries | TechnologyEnterprise |
| Published | Mar 10, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for microsoft asp.net core 10.0
Be the first to know when new high vulnerabilities affecting microsoft asp.net core 10.0 are published โ delivered to Slack, Telegram or Discord.
Get Free Alerts โ
Free ยท No credit card ยท 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Microsoft / ASP.NET Core 10.0
10.0 < 10.0.4
Microsoft / ASP.NET Core 8.0
8.0 < 8.0.25
Microsoft / ASP.NET Core 9.0
9.0 < 9.0.14
References
msrc.microsoft.com: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-26130 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2446134 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26130.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10091 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10083 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4453 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4451 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4450 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4458 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4455 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4443 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10082 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10084 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10085 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4445 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4454 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4456