MEDIUM 5.9 Microsoft

CVE-2026-69304

ASP.NET Core Denial of Service Vulnerability

Microsoft Security Update 2026-Sep: ASP.NET Core Denial of Service Vulnerability

Affected Products

ASP.NET Core 11.0
.NET 10.0 runtime installed on Windows
.NET 9.0 runtime installed on Windows
.NET 8.0 runtime installed on Windows
Microsoft Visual Studio 2026 version 18.9
Microsoft Visual Studio 2022 version 17.14
ASP.NET Core 9.0
ASP.NET Core 10.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69304
https://nvd.nist.gov/vuln/detail/CVE-2026-69304

Published: 2026-09-08 · Source: Microsoft · Feed updated: 2026-10-28

This medium severity vulnerability with a CVSS score of 5.9 was published on 2026-09-08 via Microsoft. Affected: ASP.NET Core 11.0, .NET 10.0 runtime installed on Windows, .NET 9.0 runtime installed on Windows and 5 more.

vulnfeed aggregates 17800 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.