Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
ASP.NET Core Information Disclosure Vulnerability
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2026-109476- Public snapshot refreshed
- today 20:10 UTC
- Distinct source events
- 5
- Source records represented
- 5
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Tue 10 Nov · Dated source evidence · Newly collected advisory ASP.NET Core Information Disclosure VulnerabilityCVE-2026-109476 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Newly collected advisory; observed by ChangeIntel, not the original publication date.
- Tue 10 Nov · Dated source evidence · Newly collected advisory Microsoft Security Advisory CVE-2026-109476 - ASP.NET Core Information Disclosure VulnerabilityGHSA-xhj5-c3g8-pfj8 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Newly collected advisory; observed by ChangeIntel, not the original publication date.
- Tue 10 Nov · Dated source evidence · Published vulnerability ASP.NET Core Information Disclosure VulnerabilityCVE-2026-109476 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Microsoft states that customer action is required
- Fri 13 Nov · Dated source evidence · Advisory content revised Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.EUVD-2026-121560 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Sun 15 Nov · Dated source evidence · Advisory content revised Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.EUVD-2026-121560 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.