Servers and applications
CVE-2026-42899
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.
- Severity
- High 7.5
- Published
- 12 May 2026
- Last changed
- 15 Jul 2026
- Added to UpHeron
- 22 Oct 2026
- Fixed in
- 8.0.27, 9.0.16, 10.0.8
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
.NETServers and applications · cpe:a:microsoft:.net |
|