{"id":"EUVD-2026-29719","revision":"019dd8e73edf4cbeb7bab6b5c0131348","records":[{"revision":"019dd8e73edf4cbeb7bab6b5c0131348","observedAt":"2026-11-07T09:36:16.007+00:00","statement":{"source":"euvd","id":"EUVD-2026-29719","aliases":["CVE-2026-42899","GHSA-9v76-4qcc-frgh"],"title":"Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.","description":"Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C","score":7.5,"severity":null}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42899"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29719","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 12, 2026, 4:59:06 PM","dateUpdated":"Aug 10, 2026, 3:13:16 PM"},"relatedAdvisories":[{"id":"NCSC-2026-0143","title":"Kwetsbaarheden verholpen in Microsoft Developer Tools","vulnerabilityIds":["CVE-2026-32177","CVE-2026-35433","CVE-2026-32175","CVE-2026-42899","CVE-2026-41094","CVE-2026-41109","CVE-2026-41610","CVE-2026-41611","CVE-2026-41612","CVE-2026-41613","CVE-2026-42826"]},{"id":"RHSA-2026:17527","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-42899","CVE-2026-45491","CVE-2026-45591"]},{"id":"RHSA-2026:24336","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:21286","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-34043","CVE-2026-42899"]},{"id":"RHSA-2026:21297","title":"Red Hat Security Advisory: .NET 10.0 security update","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:24335","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-34043","CVE-2026-42899"]},{"id":"RHSA-2026:21295","title":"Red Hat Security Advisory: .NET 10.0 security update","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:22145","title":"security update for dotnet10.0","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:24333","title":"Red Hat Security Advisory: .NET 9.0 security update","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:21296","title":"Red Hat Security Advisory: .NET 9.0 security update","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:21293","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-34043","CVE-2026-42899"]},{"id":"RHSA-2026:24334","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-34043","CVE-2026-42899"]},{"id":"RHSA-2026:17464","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:21754","title":"security update for dotnet9.0","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:21294","title":"Red Hat Security Advisory: .NET 9.0 security update","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:24332","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-34043","CVE-2026-42899"]},{"id":"msrc_CVE-2026-42899","title":"ASP.NET Core Denial of Service Vulnerability","vulnerabilityIds":["CVE-2026-42899"]},{"id":"RHSA-2026:21291","title":"Red Hat Security Advisory: .NET 8.0 security update","vulnerabilityIds":["CVE-2026-34043","CVE-2026-42899"]},{"id":"RHSA-2026:17682","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-8723","CVE-2026-42899","CVE-2026-45149"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-29719","identifiers":["EUVD-2026-29719","CVE-2026-42899","GHSA-9v76-4qcc-frgh"]},"retained":false,"historicalAffected":[]}],"coverage":[]}