CVE-2026-26130

—

CVSS 3.1

7.5 high

EPSS

3%p86

Published

Mar 10, 2026 (Mar 10, 2026)

Modified

Jul 15, 2026

Description

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Vendors: microsoft
Products: asp.net core
Weakness: CWE-770
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.8%)

In the news0 stories

No ingested article mentions this CVE yet.