NetSight
high7.5

CVE-2026-50506

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Impact

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected products

VendorProductAffected versions
MicrosoftAsp.Net Core Odata
from 9.0.0 before 9.5.0
MicrosoftOdata Web Api
from 7.0.0 before 7.8.0
MicrosoftAspNet.OData
from 7.0.0 before 7.8.0
MicrosoftAspNetCore.OData
from 9.0.0 before 9.5.0[SX1]

Weakness classification

References