CVE-2026-70186

LOWCVSS 7.5 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-833

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse2 posts
  • Windows Forum@windowsforum

    🔒 An unauthenticated deadlock can knock over https://ASP.NET Core apps? CVSS 7.5 says patch now—because “high availability” shouldn’t mean “available until someone sends one weird request.” https://windowsforum.com/news/cve-2026-70186-asp-net-core-denial-of-service-vulnerability.449700/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202670186 https://t.co/9ye6B0JsId

    0000044
    1.4K followersView on X
  • Windows Forum@windowsforum

    🔒 An unauthenticated deadlock can knock over https://ASP.NET Core apps? CVSS 7.5 says patch now—because “high availability” shouldn’t mean “available until someone sends one weird request.” https://windowsforum.com/news/cve-2026-70186-asp-net-core-denial-of-service-vulnerability.449700/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202670186 https://t.co/6q2V5vElQl

    0000043
    1.4K followersView on X

Explore more