https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:55:15.720650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-40372 CVE-2026-40372 — ASP.NET Core Elevation of Privilege Vulnerability 2026-10-06T10:55:15.806645+00:00

Affected: Microsoft ASP.NET Core 10.0, Microsoft Visual Studio 2026 version 18.5, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images

Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

 https://cve.radiocsirt.org/vuln/usn-8215-1 USN-8215-1 — dotnet10 vulnerability 2026-10-06T10:55:15.806727+00:00

Affected: Ubuntu:24.04:LTS: dotnet10, Ubuntu:25.10: dotnet10

It was discovered that the Microsoft.AspNetCore.DataProtection library in .NET did not properly verify cryptographic signatures under certain conditions. A remote attacker could possibly use this issue to elevate privileges.