CVE-2026-114148

News · via Microsoft Security Response Center

CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability

Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.