中文

// CVE · PUBLISHED 2026-10-13

CVE-2026-70188

Microsoft / ASP.NET Core 10.0 · Microsoft / ASP.NET Core 11.0 · Microsoft / ASP.NET Core 8.0 · +3

9.1 · CVSS 3.1Critical

Description

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

References

Related CVEs

  • CVE-2026-70300Microsoft / Microsoft 365 Apps for Enterprise · +2CVSS 9.8
  • CVE-2026-70291Microsoft / Microsoft 365 Apps for Enterprise · +5CVSS 9.8
  • CVE-2026-70279Microsoft / Microsoft Exchange Server 2016 Cumulative Update 23 · +3CVSS 9.3
  • CVE-2026-70242Microsoft / Microsoft 365 Apps for Enterprise · +2CVSS 9.8
  • CVE-2026-70157Microsoft / Windows 10 Version 1607 · +20CVSS 9.8
  • CVE-2026-70153Microsoft / Windows 10 Version 1607 · +20CVSS 9.8
  • CVE-2026-70147Microsoft / Windows 10 Version 1607 · +20CVSS 9.8
  • CVE-2026-70096Microsoft / Microsoft 365 Apps for Enterprise · +26CVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.