8.8 High
CVE-2026-102870
ASP.NET Core Remote Code Execution Vulnerability
Microsoft.NET 10.0 installed on Linux
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.9%probability of exploitation in the next 30 days
Higher than 60% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Coverage 1 article · 1 outlet
- Microsoft issues out of band .NET fixes for four flawsSecurityOnline · first in our coverage · mentions it in passing