← CVE Intelligence

CVE-2026-45591

ASP.NET Core Denial of Service Vulnerability PUBLISHED

Description (CNA)

No English CNA description was supplied.

Affected (CNA)

Vendor / productVersions
Microsoft / .NET 10.0affected 10.0.0 before 10.0.9
Microsoft / .NET 8.0affected 8.0.0 before 8.0.28
Microsoft / .NET 9.0affected 9.0.0 before 9.0.17
Microsoft / ASP.NET Core 10.0affected 10.0 before 10.0.9
Microsoft / ASP.NET Core 8.0affected 8.0 before 8.0.28
Microsoft / ASP.NET Core 9.0affected 9.0 before 9.0.17
Microsoft / Microsoft Visual Studio 2026 version 18.6affected 18.6.0 before 18.6.3

CWE

CWE-400

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in ASP.NET Core SignalR and Blazor Server. A remote attacker could send a specially crafted MessagePack payload containing deeply nested arrays that trigger excessive recursion and cause a stack overflow. This issue may result in application termination and a denial of service condition