cveboard RSS feed

CVE-2026-70188

GitHubCritical, nuget

Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Server.Kestrel.Core. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability.

No known exploitation
Severity
Critical, CVSS 9.1 (v3.1)
EPSS
0.83% chance of exploitation in 30 days (EPSS, as of Oct 23, 2026)
Affected packages
  • Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-x64 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.osx-arm64 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.osx-x64 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.win-arm64 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.win-x64 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.win-x86 (nuget) >= 11.0.0-preview.1, <= 11.0.0-rc.1, fixed in 11.0.0-rc.2 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-arm (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-arm64 (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-musl-x64 (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.linux-x64 (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.osx-arm64 (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.osx-x64 (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx
  • Microsoft.AspNetCore.App.Runtime.win-arm64 (nuget) >= 8.0.0, <= 8.0.31, fixed in 8.0.32 · GHSA-fpq8-4vhr-rcxx