UNKNOWN Microsoft

CVE-2026-114148

ASP.NET Core Elevation of Privilege Vulnerability

Microsoft Security Update 2026-Oct: ASP.NET Core Elevation of Privilege Vulnerability

Affected Products

.NET 8.0 installed on Windows
.NET 8.0 installed on Linux
.NET 8.0 installed on Mac OS
.NET 9.0 installed on Windows
.NET 9.0 installed on Linux
.NET 9.0 installed on Mac OS
.NET 10.0 installed on Windows
.NET 10.0 installed on Linux

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148
https://nvd.nist.gov/vuln/detail/CVE-2026-114148

Published: 2026-10-13 · Source: Microsoft · Feed updated: 2026-10-25

This unknown severity vulnerability was published on 2026-10-13 via Microsoft. Affected: .NET 8.0 installed on Windows, .NET 8.0 installed on Linux, .NET 8.0 installed on Mac OS and 5 more.

vulnfeed aggregates 17064 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.