Medium
6.5
ASP.NET Core Security Feature Bypass Vulnerability
CVE-2026-114156
First seen on SecPulse
Summary
Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Microsoft.NET 11.0 installed on Linux |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| Microsoft.NET 11.0 installed on Mac OS |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| Microsoft.NET 11.0 installed on Windows |
≥ 11.0.0-preview.1, < 11.0.0→ 11.0.0 |
11.0.0 |
| MicrosoftMicrosoft Visual Studio 2026 version 18.12 |
< 18.12.0→ 18.12.0 |
18.12.0 |
References
- REDHAT Red Hat
- web secure@microsoft.com