CyberICT

CVE-2026-70159

Microsoft · Published October 13, 2026

CVSS v3.1

HIGH
Patch availableGet patch

Description

ASP.NET Core Denial of Service Vulnerability. Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected Products

  • Microsoft.AspNetCore.SignalR.Common on .NET 10.0 installed on Windows
  • Microsoft.AspNetCore.SignalR.Common on .NET 10.0 installed on Linux
  • Microsoft.AspNetCore.SignalR.Common on .NET 10.0 installed on Mac OS
  • Microsoft.AspNetCore.SignalR.Core on .NET 10.0 installed on Windows

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C