CVE-2026-42899

Name of the Vulnerable Software and Affected Versions ASP.NET Core versions prior to 8.0.27 ASP.NET Core versions prior to 9.0.16 ASP.NET Core versions prior to 10.0.8

Description An unauthorized attacker can cause a denial of service over a network due to a loop with an unreachable exit condition, resulting in an infinite loop. This issue impacts multiple runtime packages across Linux, Windows, and macOS platforms.

Recommendations Update to version 8.0.27 or later. Update to version 9.0.16 or later. Update to version 10.0.8 or later.