Product:
ASP.NET Core
Summary
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. This vulnerability can lead to significant service disruptions. Attackers can exploit this flaw to overwhelm the system, causing it to become unresponsive.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-26130 |
Exploitation
To exploit this vulnerability, an attacker can send a large number of requests to the ASP.NET Core application, overwhelming its resources. By doing so, the attacker can cause the application to become unresponsive, leading to a denial of service. The low complexity of the attack means that even those with minimal technical skills can potentially carry it out.
Affected Products
- ASP.NET Core: A framework for building web applications that is vulnerable to resource allocation issues.
Mitigation
To mitigate this vulnerability, it is essential to implement resource limits and throttling in ASP.NET Core applications. This can help prevent unauthorized users from overwhelming the system. Regular updates and monitoring of application performance can also aid in identifying and addressing potential exploitation attempts.