CVE-2026-47303Patch(apple / .net)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch apple .net systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

apple CVEs Back to dashboard

3.0/ 10 priority

Sources & remediation

Patch / fix

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303

Weakness type (CWE)

CWE-90CWE-302CWE-863

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

.net
linux_kernel
macos
visual_studio_2022

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 2 signals
Technical details provided in 1 signal
Peaked 1d ago at 1 mentions (2026-07-14); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

apple linux microsoft

Products

.netlinux_kernelmacosvisual_studio_2022visual_studio_2026windows

1 version affected across 6 products

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Patch

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

VulniPulse@vulnipulse88d
Patch
⚠️ Linux dotnet9-0 alert: CVE-2026-47303 (CVSS 8.8) Attackers could bypass authentication. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/linux-cve-2026-47303 #Linux #dotnet90 #CyberSecurity #CVE
Post summary
CVE-2026-47303 is an authentication bypass vulnerability in Linux dotnet9‑0 with a CVSS score of 8.8; the advisory recommends upgrading to the vendor‑fixed release, and no active exploitation or PoC details are reported.
0000047
6 followersView on X
Windows Forum@windowsforum92d
Patch
🪟 CVE-2026-47303 is Microsoft’s latest reminder: “works in production” isn’t a security strategy. Patch http://ASP.NET Core, rebuild containers, and hope the missing details don’t become tomorrow’s incident report. https://windowsforum.com/threads/cve-2026-47303-patch-asp-net-core-runtimes-and-rebuild-containers.438147/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #AspNetCore #NetSecurity #Con… https://t.co/gbByZ7iLEc
Post summary
The post focuses on patching ASP.NET Core and rebuilding containers to mitigate CVE‑2026‑47303, but it lacks technical details or exploit information.
0000039
1.2K followersView on X

CPE platform detail6 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

6 of 6 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	macos	-	-	-
OS	linux	linux_kernel	-	-	-
App	microsoft	.net	-	-	-
App	microsoft	visual_studio_2022	-	-	-
App	microsoft	visual_studio_2026	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard apple CVEs linux CVEs microsoft CVEs .net vulnerabilities