onyx --cves cve-2026-47303

CVE-2026-47303

score: 0.1
cvss: 8.8
epss: 0.8%
published: 2026-07-14
kev added: —
first seen: 2026-10-21

ASP.NET Core contains an authentication bypass caused by assumed-immutable data, letting authorized attackers elevate privileges over a network, exploit requires attacker to be authorized.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2026-07-14 Published
2026-10-21 Tracked by Onyx

Weaknesses

CWE-90

References 1

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303