Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| High | 7.5 | CVE-2026-70179 |
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
MicrosoftMicrosoft Visual Studio 2022 version 17.14, Microsoft Visual Studio 2026 version 18.10, Microsoft.AspNetCore.Authentication.Negotiate
|
NVD | |||
|
CVE-2026-70179Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
From the advisoryAuthentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. Impact if exploitedConfidentialityHigh IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H AffectsMicrosoftMicrosoft Visual Studio 2022 version 17.14Microsoft Visual Studio 2026 version 18.10Microsoft.AspNetCore.Authentication.Negotiate
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||