CVE-2026-26130

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-26130
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*
History

02 Apr 2026, 13:58

Type Values Removed Values Added
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26130 - Vendor Advisory
Summary
  • (es) Asignación de recursos sin límites ni limitación en ASP.NET Core permite a un atacante no autorizado denegar el servicio a través de una red.
First Time Microsoft
Microsoft asp.net Core
CPE cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*

10 Mar 2026, 18:18

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-10 18:18

Updated : 2026-04-02 13:58

NVD link : CVE-2026-26130

Mitre link : CVE-2026-26130

CVE.ORG link : CVE-2026-26130

JSON object : View

Products Affected

microsoft

  • asp.net_core
CWE
CWE-770

Allocation of Resources Without Limits or Throttling