Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
Exact source revision recorded 7 Nov 2026 02:40:43 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2025-34426
PublishedInconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.
Original publisher date fields
datePublished: Oct 14, 2025, 5:00:10 PM
dateUpdated: Feb 22, 2026, 5:24:12 PM
14 related source bulletins · separate from aliases
RHSA-2025:18150: security update for dotnet9.0
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2026:9080: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
CVE-2025-26646 · CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315 · CVE-2026-26171 · CVE-2026-32178 · CVE-2026-32203 · CVE-2026-33116
NCSC-2025-0313: Kwetsbaarheden verholpen in Microsoft Developer Tools
CVE-2025-25004 · CVE-2025-54132 · CVE-2025-55240 · CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2025:18256: Red Hat Security Advisory: .NET 8.0 security update
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2026:9205: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
CVE-2025-26646 · CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315 · CVE-2026-26171 · CVE-2026-32178 · CVE-2026-32203 · CVE-2026-33116
RHSA-2025:18153: Red Hat Security Advisory: .NET 9.0 security update
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2025:18148: security update for dotnet8.0
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHBA-2025:20916: Red Hat Bug Fix Advisory: .NET 10.0 bug fix and enhancement update
CVE-2025-55247 · CVE-2025-55315
RHSA-2025:18149: security update for dotnet8.0
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHBA-2025:20993: bugfix update for dotnet10.0
CVE-2025-55247 · CVE-2025-55315
msrc_CVE-2025-55315: ASP.NET Security Feature Bypass Vulnerability
CVE-2025-55315
RHSA-2025:18151: security update for dotnet9.0
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2025:18152: Red Hat Security Advisory: .NET 8.0 security update
CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315
RHSA-2025:23225: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.25.0 Release.
CVE-2024-4067 · CVE-2025-55247 · CVE-2025-55248 · CVE-2025-55315 · CVE-2025-55752 · CVE-2025-61927 · CVE-2025-66516
- Source published
- Oct 14, 2025, 5:00:10 PM (timezone not stated)
- Source modified
- Feb 22, 2026, 5:24:12 PM (timezone not stated)
- Observed here
- 7 Nov 2026 02:40:43 UTC
- Source terms
- ENISA EUVD · source terms and attribution apply
Original source record · Cite this exact observation · Complete original publisher JSON
This view projects the publisher's source fields for reading; the original JSON retains additional fields and CVE enrichment containers. Attribution: euvd · ENISA EUVD · source terms and attribution apply. Source text is retained; field grouping and change labels are provided by ChangeIntel.
EUVD CVSS 3.1 · 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C