PT-2025-28469

CVE-2025-7326

Publicado

2025-07-08

Atualizado

2026-09-18

Descrição por

CVSS 3.1

7.0

Alta

MétricasAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions: ASP.NET Core (affected versions not specified)

Description: The issue concerns weak authentication in End Of Life (EOL) ASP.NET Core, allowing an unauthorized attacker to elevate privileges over a network. It affects only EOL software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-1390: Weak Authentication

Identificadores relacionados

CVE-2025-7326

BIT-ASPNET-CORE-2025-7326

BIT-DOTNET-2025-7326