NetSight
high7.5

CVE-2025-26682

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Impact

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected products

VendorProductAffected versions
MicrosoftAsp.Net Core
from 8.0.0 before 8.0.15
from 9.0.0 before 9.0.4
MicrosoftVisual Studio 2022
from 17.8.0 before 17.8.20
from 17.10.0 before 17.10.13
from 17.12.0 before 17.12.7
from 17.13.0 before 17.13.6

Weakness classification

References