CVE-2025-26682
Fixed in a distro release EPSS 2%CVSS 7.5
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Products: Microsoft ASP.NET Core 8.0, Microsoft ASP.NET Core 9.0, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.13, Microsoft Visual Studio 2022 version 17.8
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 22.04 LTS | dotnet6 | no fix |
| Ubuntu 22.04 LTS | dotnet7 | no fix |
| Ubuntu 22.04 LTS | dotnet8 | 8.0.115-8.0.15-0ubuntu1~22.04.1 |
| Ubuntu 24.04 LTS | dotnet8 | 8.0.115-8.0.15-0ubuntu1~24.04.1 |
| Ubuntu 25.10 | dotnet8 | 8.0.115-8.0.15-0ubuntu1 |
| Ubuntu 25.10 | dotnet9 | 9.0.105-9.0.4-0ubuntu1 |