{"id":"EUVD-2026-44354","revision":"34071e21ba9a4c4cb169258e11663d10","records":[{"revision":"34071e21ba9a4c4cb169258e11663d10","observedAt":"2026-11-05T10:05:55.598+00:00","statement":{"source":"euvd","id":"EUVD-2026-44354","aliases":["CVE-2026-47303","GHSA-2p3q-h3hg-jcqq"],"title":"Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.","description":"Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":8.8,"severity":null}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-44354","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jul 14, 2026, 6:45:33 PM","dateUpdated":"Nov 1, 2026, 5:32:11 PM"},"relatedAdvisories":[{"id":"RHSA-2026:41900","title":"Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"RHSA-2026:41899","title":"Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"WID-SEC-W-2026-2324","title":"Microsoft DeveloperTools: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2026-45496","CVE-2026-45646","CVE-2026-47282","CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-47305","CVE-2026-50506","CVE-2026-50520","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57101","CVE-2026-57102","CVE-2026-57108"]},{"id":"RHSA-2026:42145","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"RHSA-2026:41894","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"RHSA-2026:39952","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47303","CVE-2026-47304","CVE-2026-50659","CVE-2026-56170"]},{"id":"RHSA-2026:58567","title":"Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108","CVE-2026-62899","CVE-2026-62900","CVE-2026-62901","CVE-2026-62909"]},{"id":"RHSA-2026:58566","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108","CVE-2026-62899","CVE-2026-62900","CVE-2026-62901","CVE-2026-62909"]},{"id":"RHSA-2026:41895","title":"Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"RHSA-2026:58569","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108","CVE-2026-62899","CVE-2026-62900","CVE-2026-62901","CVE-2026-62909"]},{"id":"RHSA-2026:41893","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"RHSA-2026:41901","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"RHSA-2026:58568","title":"Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108","CVE-2026-62899","CVE-2026-62900","CVE-2026-62901","CVE-2026-62909"]},{"id":"RHSA-2026:41897","title":"Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"RHSA-2026:41896","title":"Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"RHSA-2026:58570","title":"Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108","CVE-2026-62899","CVE-2026-62900","CVE-2026-62901","CVE-2026-62909"]},{"id":"msrc_CVE-2026-47303","title":"ASP.NET Core Elevation of Privilege Vulnerability","vulnerabilityIds":["CVE-2026-47303"]},{"id":"RHSA-2026:41898","title":"Red Hat Security Advisory: .NET 10.0 security, bug fix, and enhancement update","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-47304","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50646","CVE-2026-50648","CVE-2026-50649","CVE-2026-50650","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]},{"id":"NCSC-2026-0235","title":"Kwetsbaarheden verholpen in Microsoft Developer Tools","vulnerabilityIds":["CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-50524","CVE-2026-56170","CVE-2026-47304","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50648","CVE-2026-50651","CVE-2026-50659","CVE-2026-57108","CVE-2026-50646","CVE-2026-50649","CVE-2026-50650","CVE-2026-50506","CVE-2026-45646","CVE-2026-47282","CVE-2026-45496","CVE-2026-50520","CVE-2026-41109","CVE-2026-57101","CVE-2026-57102","CVE-2026-47305"]},{"id":"RHSA-2026:26638","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","vulnerabilityIds":["CVE-2026-45491","CVE-2026-45591","CVE-2026-45736","CVE-2026-47300","CVE-2026-47302","CVE-2026-47303","CVE-2026-50524","CVE-2026-50525","CVE-2026-50526","CVE-2026-50527","CVE-2026-50528","CVE-2026-50648","CVE-2026-50651","CVE-2026-50659","CVE-2026-56170","CVE-2026-57108"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-44354","identifiers":["EUVD-2026-44354","CVE-2026-47303","GHSA-2p3q-h3hg-jcqq"]},"retained":false,"historicalAffected":[]}],"coverage":[]}