[CVE-2026-47300] Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker t…

Descripción técnica

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

.net, Macos, Linux kernel, Windows, Visual studio 2022 — Microsoft, Apple, Linux

Debilidades (CWE)

CWE-303

Fuente oficial

Publicado en NIST NVD.