CVE-2026-114148

Name of the Vulnerable Software and Affected Versions ASP.NET Core (affected versions not specified) .NET (affected versions not specified)

Description Incorrect default permissions in ASP.NET Core allow an authorized attacker to elevate privileges locally. Additionally, unsafe ownership metadata in .NET tarballs enables a local attacker to modify files and gain elevated privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.