Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
Exact source revision recorded 7 Nov 2026 02:40:43 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2025-34426
PublishedEUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Oct 14, 2025, 5:00:10 PM
dateUpdated: Feb 22, 2026, 5:24:12 PM
14 related source bulletins · separate from aliases
RHSA-2025:18150: security update for dotnet9.0
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2026:9080: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
CVE-2025-26646 · CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315 · CVE-2026-26171 · CVE-2026-32178 · CVE-2026-32203 · CVE-2026-33116
NCSC-2025-0313: Kwetsbaarheden verholpen in Microsoft Developer Tools
CVE-2025-25004 · CVE-2025-54132 · CVE-2025-55240 · CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2025:18256: Red Hat Security Advisory: .NET 8.0 security update
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2026:9205: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
CVE-2025-26646 · CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315 · CVE-2026-26171 · CVE-2026-32178 · CVE-2026-32203 · CVE-2026-33116
RHSA-2025:18153: Red Hat Security Advisory: .NET 9.0 security update
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2025:18148: security update for dotnet8.0
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHBA-2025:20916: Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update
CVE-2025-55247 · CVE-2025-55315
RHSA-2025:18149: security update for dotnet8.0
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHBA-2025:20993: bugfix update for dotnet10.0
CVE-2025-55247 · CVE-2025-55315
msrc_CVE-2025-55315: ASP.NET Security Feature Bypass Vulnerability
CVE-2025-55315
RHSA-2025:18151: security update for dotnet9.0
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2025:18152: Red Hat Security Advisory: .NET 8.0 security update
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2025:23225: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.25.0 Release.
CVE-2024-4067 · CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315 · CVE-2025-55752 · CVE-2025-61927 · CVE-2025-66516
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON