PT-2026-117214

CVE-2026-112044

·

Published

2026-10-19

·

Updated

2026-10-19

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions dotnet eShop versions up to 913acea66708a59595351174cee9b29f37179d29
Description An issue in the Catalog API component allows for improper authentication. This can be triggered remotely through the AddApplicationServices() function located in the src/Catalog.API/Extensions/Extensions.cs file.
Recommendations As a temporary workaround, consider restricting the use of the AddApplicationServices() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2026-112044
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com