CyberICT

CVE-2026-57099

Microsoft · Published September 8, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

ASP.NET Core Denial of Service Vulnerability. Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected Products

  • Microsoft.AspNetCore.OData

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C