CVE-2026-70188

LOWCVSS 9.1 · CRITICAL

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70188

Weakness type (CWE)

CWE-444

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

名などない好きに呼べ@shupeluter1d
@sakky_hs CVE-2026-70188 https://ASP.NET Core / Kestrel Critical・9.1 HTTP Request Smuggling CVE-2026-88092 https://ASP.NET Core Critical セキュリティ機能のバイパス CVE-2026-96230 https://ASP.NET Core High
1001057
4.7K followersView on X

Explore more

Back to dashboard