CVE-2025-26682 | Severity.io

Description

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Related CPE's

microsoft

asp.net_core

microsoft

visual_studio_2022

References

Vendor Advisory

Weaknesses

Secondary

CWE-770

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 · High

Information

Source identifier

Vulnerability status

Analyzed

Published

2025-04-08T18:15:53.033Z

1 year ago

Last modified

2026-06-17T09:02:16.770Z

2 months ago