PT-2026-58697

CVE-2026-47303

·

Published

2026-07-14

·

Updated

2026-08-17

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ASP.NET Core (affected versions not specified)
Description An authentication bypass occurs due to the use of assumed-immutable data, which allows an authorized attacker to elevate privileges over a network.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-302: Authentication Bypass by Assumed-Immutable Data
CWE-863: Incorrect Authorization
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query (\'LDAP Injection\')
Related identifiers
CVE-2026-47303
BDU:2026-12015
GHSA-2P3Q-H3HG-JCQQ
ALSA-2026:41893
ALSA-2026:41894
ALSA-2026:41895
ALSA-2026:41896
ALSA-2026:41897
ALSA-2026:41898
ALSA-2026:41899
ALSA-2026:41900
ALSA-2026:41901
BIT-DOTNET-2026-47303
BIT-DOTNET-SDK-2026-47303
RHSA-2026:26638
RHSA-2026:39952
RHSA-2026:41893
RHSA-2026:41894
RHSA-2026:41895
RHSA-2026:41896
RHSA-2026:41897
RHSA-2026:41898
RHSA-2026:41899
RHSA-2026:41900
RHSA-2026:41901
RHSA-2026:42145
USN-8553-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com