NetSight
IP …
high7.5

CVE-2026-45591

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Impact

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected packages

EcosystemPackageAffectedFixed in
nugetMicrosoft.AspNetCore.App.Runtime.linux-x64>= 8.0.0, <= 8.0.278.0.28
nugetMicrosoft.AspNetCore.App.Runtime.win-x64>= 8.0.0, <= 8.0.278.0.28
nugetMicrosoft.AspNetCore.App.Runtime.osx-arm64>= 8.0.0, <= 8.0.278.0.28
nugetMicrosoft.AspNetCore.SignalR.Protocols.MessagePack>= 8.0.0, <= 8.0.278.0.28

Affected products

VendorProductAffected versions
MicrosoftAsp.Net Core
from 8.0.0 before 8.0.28
from 9.0.0 before 9.0.17
from 10.0.0 before 10.0.9
MicrosoftVisual Studio 2026
from 18.6.0 before 18.6.3
Microsoft.Net
from 8.0.0 before 8.0.28
from 9.0.0 before 9.0.17
from 10.0.0 before 10.0.9

Weakness classification

CWE-400CWE-787CWE-770

References