CVE-2026-114148

Опубликовано: 25 окт. 2026

Источник: msrc

EPSS Низкий

Описание

ASP.NET Core Elevation of Privilege Vulnerability

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

FAQ

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain the highest privileges on the system.

Обновления

Продукт	Статья	Обновление
.NET 8.0 installed on Windows	5133964	Security Update
.NET 8.0 installed on Linux	5133964	Security Update
.NET 8.0 installed on Mac OS	5133964	Security Update
.NET 9.0 installed on Windows	5133965	Security Update
.NET 9.0 installed on Linux	5133965	Security Update
.NET 9.0 installed on Mac OS	5133965	Security Update
.NET 10.0 installed on Windows	5133966	Security Update
.NET 10.0 installed on Linux	5133966	Security Update
.NET 10.0 installed on Mac OS	5133966	Security Update
.NET 11.0 installed on Windows	Release Notes	Security Update

Показывать по

Возможность эксплуатации

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 29%

0.00355

Низкий

Связанные уязвимости

CVE-2026-114148

CVSS3: 7.8

ubuntu

11 дней назад

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

CVE-2026-114148

CVSS3: 7.8

redhat

17 дней назад

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

CVE-2026-114148

CVSS3: 7.8

nvd

11 дней назад

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.

RLSA-2026:92438

rocky

10 дней назад

Important: .NET 10.0 security, bug fix, and enhancement update

RLSA-2026:92432

rocky

9 дней назад

Important: .NET 10.0 security, bug fix, and enhancement update

EPSS

Процентиль: 29%

0.00355

Низкий