PT-2025-28469

CVE-2025-7326

Published

2025-07-08

Updated

2026-09-18

Description by

CVSS 3.1

7.0

High

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions: ASP.NET Core (affected versions not specified)

Description: The issue concerns weak authentication in End Of Life (EOL) ASP.NET Core, allowing an unauthorized attacker to elevate privileges over a network. It affects only EOL software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Researchers

Vendors

Affected products

Weakness enumeration

CWE-1390: Weak Authentication

Related identifiers

CVE-2025-7326

BIT-ASPNET-CORE-2025-7326

BIT-DOTNET-2025-7326