Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.
cve-program · CVE-2026-45591
Published
Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-45591
Published.NET 10.0
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": ".NET 10.0",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.9",
"versionType": "custom",
"status": "affected"
}
]
}.NET 8.0
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": ".NET 8.0",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.28",
"versionType": "custom",
"status": "affected"
}
]
}.NET 9.0
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": ".NET 9.0",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.17",
"versionType": "custom",
"status": "affected"
}
]
}ASP.NET Core 10.0
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "ASP.NET Core 10.0",
"versions": [
{
"version": "10.0",
"lessThan": "10.0.9",
"versionType": "custom",
"status": "affected"
}
]
}ASP.NET Core 8.0
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "ASP.NET Core 8.0",
"versions": [
{
"version": "8.0",
"lessThan": "8.0.28",
"versionType": "custom",
"status": "affected"
}
]
}ASP.NET Core 9.0
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "ASP.NET Core 9.0",
"versions": [
{
"version": "9.0",
"lessThan": "9.0.17",
"versionType": "custom",
"status": "affected"
}
]
}Microsoft Visual Studio 2026 version 18.6
Vendor product
Publisher's version information
Shown as published. These rules are not interpreted as NuGet package version ranges.
{
"vendor": "Microsoft",
"product": "Microsoft Visual Studio 2026 version 18.6",
"versions": [
{
"version": "18.6.0",
"lessThan": "18.6.3",
"versionType": "custom",
"status": "affected"
}
]
}Original source record · Cite this exact observation · Complete original publisher JSON