Microsoft disclosed CVE-2026-114148, an elevation of privilege vulnerability in ASP.NET Core affecting .NET 9.0, 10.0, and 11.0 on Linux, macOS, and Windows with CVSS 7.8. Red Hat has released patched versions (9.0.123, 10.0.403, 11.0.100-rc.3). An attacker with low privileges can gain unauthorized elevated privileges. No public exploitation reported.
- Red Hat Security Advisory: .NET 9.0 security update | Threat Rad(opens in a new tab)
- Red Hat Security Advisory: .NET 9.0 security update | Threat Rad(opens in a new tab)
// Get alerts for Microsoft Azure