Servers and applications

CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Severity: High 7.8
Published: 29 Oct 2026
Last changed: 30 Oct 2026
Added to UpHeron: 29 Oct 2026
Fixed in: 8.0.427, 9.0.22, 9.0.320, 10.0.403, 10.0.403-servicing.26523.112, 11.0.100-rc.3
Sources: CVE Program

Affected software

Software	Affected versions
.NETServers and applications · `cna:microsoft\|.net*`	From 8.0.0 before 8.0.427 From 8.0.100 before 10.0.403-servicing.26523.112 From 9.0.0 before 9.0.320 From 10.0.0 before 10.0.403 From 11.0.0-preview.1 before 11.0.100-rc.3
.NETServers and applications · `cna:microsoft\|asp.net core*`	From 8.0.0 before 9.0.22