CVE-2026-96230

LOWCVSS 8.8 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96230

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

名などない好きに呼べ@shupeluter1d
@sakky_hs CVE-2026-70188 https://ASP.NET Core / Kestrel Critical・9.1 HTTP Request Smuggling CVE-2026-88092 https://ASP.NET Core Critical セキュリティ機能のバイパス CVE-2026-96230 https://ASP.NET Core High
1001057
4.7K followersView on X

Explore more

Back to dashboard