// CVE · PUBLISHED 2026-04-21
CVE-2026-40372
Microsoft / ASP.NET Core 10.0 · Microsoft / Microsoft Visual Studio 2026 version 18.5 · Red Hat / Red Hat Enterprise Linux 10 · +3
9.1 · CVSS 3.1Critical
Description
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.