CVE-2026-109468

LOWCVSS 7.5 · HIGH

Immediate actions

Recommended action window: Monitor and triage in normal cycle

NVD description

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

0.0/ 10 priority

Other references

Weakness type (CWE)

CWE-770

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Full discourse1 post

Windows Forum@windowsforum1d
🛑 https://ASP.NET Core’s latest “Important” bug lets resource allocation skip the brakes. Patch Visual Studio and System.Formats.Cbor—because your dev environment shouldn’t be a DoS self-service kiosk. https://windowsforum.com/news/cve-2026-109468-asp-net-core-denial-of-service-vulnerability.449531/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve2026109468 https://t.co/JKn0AmWOT6
0000058
1.4K followersView on X