← CVE Intelligence

CVE-2026-42899

ASP.NET Core Denial of Service Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / productVersions
Microsoft / .NET 10.0affected 10.0.0 before 10.0.8
Microsoft / .NET 8.0affected 8.0.0 before 8.0.27
Microsoft / .NET 9.0affected 9.0.0 before 9.0.16

CWE

CWE-835

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in dotnet. An infinite loop in ASP.NET Core allows an unauthenticated remote attacker to cause a denial of service over a network. This issue can lead to an application crash and a high consumption of system resources.