CVE-2026-42899

score

<0.1

cvss

7.5

epss

2.4%

published

2026-05-12

kev added

—

first seen

2026-10-21

ASP.NET Core contains an infinite loop caused by an unreachable exit condition, letting unauthorized attackers cause denial of service over a network, exploit requires network access.