CVE-2026-70179high7.5
ASP.NET Core Elevation of Privilege Vulnerability
Impact
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Source excerpt · microsoftAffected packages
This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Microsoft · Microsoft Visual Studio 2022 version 17.14
| Version / range | Source status |
|---|---|
| 17.14.0 to before 17.14.42 | affected |
Microsoft · Microsoft Visual Studio 2026 version 18.10
| Version / range | Source status |
|---|---|
| 18.10.0 to before 18.10.4 | affected |
Microsoft · Microsoft.AspNetCore.Authentication.Negotiate
Platforms: .NET 10.0 runtime installed on Linux, .NET 10.0 runtime installed on Mac OS, .NET 10.0 runtime installed on Windows, .NET 8.0 runtime installed on Linux, .NET 8.0 runtime installed on Mac OS, .NET 8.0 runtime installed on Windows, .NET 9.0 runtime installed on Linux, .NET 9.0 runtime installed on Mac OS, .NET 9.0 runtime installed on Windows
| Version / range | Source status |
|---|---|
| 10.0.0 to before 10.0.13 | affected |
Original source description
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.