CVE-2025-7326

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Jul 8, 2025
Source updated: Jul 22, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

EOL ASP.NET Core Elevation of Privilege Vulnerability

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ASP.NET Core 6.0

Vendor: Microsoft
Product: ASP.NET Core 6.0
Platforms: Unknown
Default status: unaffected

ASP.NET Core 6.0 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.Identity

Vendor: Microsoft
Product: Microsoft.AspNetCore.Identity
Platforms: Windows
Linux
MacOS
Default status: unaffected
Package: Microsoft.AspNetCore.Identity

Microsoft.AspNetCore.Identity · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.win-arm

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.win-arm
Platforms: Windows
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.win-arm

Microsoft.AspNetCore.App.Runtime.win-arm · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.win-arm64

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.win-arm64
Platforms: Windows
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.win-arm64

Microsoft.AspNetCore.App.Runtime.win-arm64 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.win-x64

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.win-x64
Platforms: Windows
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.win-x64

Microsoft.AspNetCore.App.Runtime.win-x64 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.win-x86

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.win-x86
Platforms: Windows
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.win-x86

Microsoft.AspNetCore.App.Runtime.win-x86 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.linux-arm

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.linux-arm
Platforms: Linux
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.linux-arm

Microsoft.AspNetCore.App.Runtime.linux-arm · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.linux-arm64

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.linux-arm64
Platforms: Linux
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.linux-arm64

Microsoft.AspNetCore.App.Runtime.linux-arm64 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.linux-musl-arm

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.linux-musl-arm
Platforms: Linux
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.linux-musl-arm

Microsoft.AspNetCore.App.Runtime.linux-musl-arm · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
Platforms: Linux
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.linux-musl-x64

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.linux-musl-x64
Platforms: Linux
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.linux-musl-x64

Microsoft.AspNetCore.App.Runtime.linux-musl-x64 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.linux-x64

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.linux-x64
Platforms: Linux
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.linux-x64

Microsoft.AspNetCore.App.Runtime.linux-x64 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.osx-arm64

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.osx-arm64
Platforms: MacOS
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.osx-arm64

Microsoft.AspNetCore.App.Runtime.osx-arm64 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed

Microsoft.AspNetCore.App.Runtime.osx-x64

Vendor: Microsoft
Product: Microsoft.AspNetCore.App.Runtime.osx-x64
Platforms: MacOS
Default status: unaffected
Package: Microsoft.AspNetCore.App.Runtime.osx-x64

Microsoft.AspNetCore.App.Runtime.osx-x64 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
>=6.0.0	`affected`	semver	Unavailable	6.0.36	None listed