CVE-2026-70179
CVE-2026-70179 · ASP.NET Core Elevation of Privilege Vulnerability
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
CVSS 7.5 · Alta · EPSS 0,6% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
microsoft visual studio 2022 version 17.14
- Versiones
- ≥ 17.14.0, < 17.14.42: Afectada (custom)
Actualiza a 17.14.42
microsoft visual studio 2026 version 18.10
- Versiones
- ≥ 18.10.0, < 18.10.4: Afectada (custom)
Actualiza a 18.10.4
microsoft.aspnetcore.authentication.negotiate
- Versiones
- ≥ 10.0.0, < 10.0.13: Afectada (custom)
Actualiza a 10.0.13
dotnet6 Ubuntu:22.04:LTS
- Versiones
- 6.0.108-0ubuntu1~22.04.1
- 6.0.109-0ubuntu1~22.04.1
- 6.0.110-0ubuntu1~22.04.1
- 6.0.111-0ubuntu1~22.04.1
- 6.0.113-0ubuntu1~22.04.1
- 6.0.116-0ubuntu1~22.04.1
- 6.0.118-0ubuntu1~22.04.1
- 6.0.119-0ubuntu1~22.04.1
- 6.0.120-0ubuntu1~22.04.1
- 6.0.121-0ubuntu1~22.04.1
- 6.0.122-0ubuntu1~22.04.1
- 6.0.123-0ubuntu1~22.04.1
- 6.0.124-0ubuntu1~22.04.1
- 6.0.125-0ubuntu1~22.04.1
- 6.0.126-0ubuntu1~22.04.1
- 6.0.127-0ubuntu1~22.04.1
- 6.0.128-0ubuntu1~22.04.2
- 6.0.132-0ubuntu1~22.04.1
- 6.0.133-0ubuntu1~22.04.1
- 6.0.135-0ubuntu1~22.04.1
- 6.0.136-0ubuntu1~22.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
dotnet7 Ubuntu:22.04:LTS
- Versiones
- 7.0.105-0ubuntu1~22.04.1
- 7.0.107-0ubuntu1~22.04.1
- 7.0.108-0ubuntu1~22.04.1
- 7.0.109-0ubuntu1~22.04.1
- 7.0.110-0ubuntu1~22.04.1
- 7.0.111-0ubuntu1~22.04.1
- 7.0.112-0ubuntu1~22.04.1
- 7.0.113-0ubuntu1~22.04.1
- 7.0.114-0ubuntu1~22.04.1
- 7.0.115-0ubuntu1~22.04.1
- 7.0.116-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.1
- 7.0.117-0ubuntu1~22.04.2
- 7.0.119-0ubuntu1~22.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
dotnet8 Ubuntu:22.04:LTS
- Versiones
- 8.0.102-8.0.2-0ubuntu1~22.04.1
- 8.0.103-8.0.3-0ubuntu1~22.04.1
- 8.0.103-8.0.3-0ubuntu1~22.04.2
- 8.0.105-8.0.5-0ubuntu1~22.04.1
- 8.0.107-8.0.7-0ubuntu1~22.04.1
- 8.0.108-8.0.8-0ubuntu1~22.04.1
- 8.0.110-8.0.10-0ubuntu1~22.04.1
- 8.0.111-8.0.11-0ubuntu1~22.04.1
- 8.0.112-8.0.12-0ubuntu1~22.04.1
- 8.0.114-8.0.14-0ubuntu1~22.04.1
- 8.0.115-8.0.15-0ubuntu1~22.04.1
- 8.0.116-8.0.16-0ubuntu1~22.04.1
- 8.0.117-8.0.17-0ubuntu1~22.04.1
- 8.0.118-8.0.18-0ubuntu1~22.04.1
- 8.0.119-8.0.19-0ubuntu1~22.04.1
- 8.0.120-8.0.20-0ubuntu1~22.04.1
- 8.0.121-8.0.21-0ubuntu1~22.04.1
- 8.0.122-8.0.22-0ubuntu1~22.04.1
- 8.0.123-8.0.23-0ubuntu1~22.04.1
- 8.0.124-8.0.24-0ubuntu1~22.04.1
- 8.0.125-8.0.25-0ubuntu1~22.04.1
- 8.0.126-8.0.26-0ubuntu1~22.04.1
- 8.0.127-8.0.27-0ubuntu1~22.04.1
- 8.0.128-8.0.28-0ubuntu1~22.04.1
- 8.0.129-8.0.29-0ubuntu1~22.04.1
- 8.0.130-8.0.30-0ubuntu1~22.04.1
- 8.0.131-8.0.31-0ubuntu1~22.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 8.0.132-8.0.32-0ubuntu1~22.04.1
Actualiza a 8.0.132-8.0.32-0ubuntu1~22.04.1
dotnet10 Ubuntu:24.04:LTS
- Versiones
- 10.0.100-10.0.0-0ubuntu1~24.04.1
- 10.0.101-10.0.1-0ubuntu1~24.04.2
- 10.0.103-10.0.3-0ubuntu1~24.04.1
- 10.0.104-10.0.4-0ubuntu1~24.04.1
- 10.0.105-10.0.5-0ubuntu1~24.04.1
- 10.0.106-10.0.6-0ubuntu1~24.04.1
- 10.0.107-10.0.7-0ubuntu1~24.04.1
- 10.0.108-10.0.8-0ubuntu1~24.04.1
- 10.0.109-10.0.9-0ubuntu1~24.04.1
- 10.0.110-10.0.10-0ubuntu1~24.04.1
- 10.0.111-10.0.11-0ubuntu1~24.04.1
- 10.0.112-10.0.12-0ubuntu1~24.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 10.0.113-10.0.13-0ubuntu1~24.04.1
Actualiza a 10.0.113-10.0.13-0ubuntu1~24.04.1
dotnet8 Ubuntu:24.04:LTS
- Versiones
- 8.0.100-8.0.0~rc1-0ubuntu1
- 8.0.100-8.0.0~rc2-0ubuntu1
- 8.0.100-8.0.0~rc2-0ubuntu2
- 8.0.100-8.0.0-0ubuntu1
- 8.0.100-8.0.0-0ubuntu2
- 8.0.101-8.0.1-0ubuntu1
- 8.0.101-8.0.1-0ubuntu2
- 8.0.102-8.0.2-0ubuntu1
- 8.0.103-8.0.3-0ubuntu2
- 8.0.103-8.0.3-0ubuntu3
- 8.0.104-8.0.4-0ubuntu1
- 8.0.105-8.0.5-0ubuntu1~24.04.1
- 8.0.107-8.0.7-0ubuntu1~24.04.1
- 8.0.108-8.0.8-0ubuntu1~24.04.1
- 8.0.108-8.0.8-0ubuntu1~24.04.2
- 8.0.110-8.0.10-0ubuntu1~24.04.1
- 8.0.111-8.0.11-0ubuntu1~24.04.1
- 8.0.112-8.0.12-0ubuntu1~24.04.1
- 8.0.114-8.0.14-0ubuntu1~24.04.1
- 8.0.115-8.0.15-0ubuntu1~24.04.1
- 8.0.116-8.0.16-0ubuntu1~24.04.1
- 8.0.117-8.0.17-0ubuntu1~24.04.1
- 8.0.118-8.0.18-0ubuntu1~24.04.1
- 8.0.119-8.0.19-0ubuntu1~24.04.1
- 8.0.120-8.0.20-0ubuntu1~24.04.1
- 8.0.121-8.0.21-0ubuntu1~24.04.1
- 8.0.122-8.0.22-0ubuntu1~24.04.1
- 8.0.123-8.0.23-0ubuntu1~24.04.1
- 8.0.124-8.0.24-0ubuntu1~24.04.1
- 8.0.125-8.0.25-0ubuntu1~24.04.1
- 8.0.126-8.0.26-0ubuntu1~24.04.1
- 8.0.127-8.0.27-0ubuntu1~24.04.1
- 8.0.128-8.0.28-0ubuntu1~24.04.1
- 8.0.129-8.0.29-0ubuntu1~24.04.1
- 8.0.130-8.0.30-0ubuntu1~24.04.1
- 8.0.131-8.0.31-0ubuntu1~24.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 8.0.132-8.0.32-0ubuntu1~24.04.1
Actualiza a 8.0.132-8.0.32-0ubuntu1~24.04.1
dotnet10 Ubuntu:26.10
- Versiones
- 10.0.105-10.0.5-0ubuntu1
- 10.0.107-10.0.7-0ubuntu1~26.04.1
- 10.0.108-10.0.8-0ubuntu1
- 10.0.109-10.0.9-0ubuntu1
- 10.0.110-10.0.10-0ubuntu3
- 10.0.111-10.0.11-0ubuntu1
- 10.0.112-10.0.12-0ubuntu1
- 10.0.112-10.0.12-0ubuntu2
- Intervalos de versiones afectados
- ECOSYSTEM: < 10.0.113-10.0.13-0ubuntu1~26.10.1
Actualiza a 10.0.113-10.0.13-0ubuntu1~26.10.1
dotnet10 Ubuntu:26.04:LTS
- Versiones
- 10.0.100-10.0.0~rc1-0ubuntu1
- 10.0.100-10.0.0~rc2-0ubuntu1
- 10.0.100-10.0.0-0ubuntu1
- 10.0.100-10.0.0-0ubuntu2
- 10.0.101-10.0.1-0ubuntu1
- 10.0.101-10.0.1-0ubuntu2
- 10.0.101-10.0.1-0ubuntu3
- 10.0.102-10.0.2-0ubuntu1
- 10.0.103-10.0.3-0ubuntu1
- 10.0.104-10.0.4-0ubuntu1
- 10.0.105-10.0.5-0ubuntu1
- 10.0.107-10.0.7-0ubuntu1~26.04.1
- 10.0.108-10.0.8-0ubuntu1~26.04.1
- 10.0.109-10.0.9-0ubuntu1~26.04.1
- 10.0.110-10.0.10-0ubuntu1~26.04.1
- 10.0.111-10.0.11-0ubuntu1~26.04.1
- 10.0.112-10.0.12-0ubuntu1~26.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 10.0.113-10.0.13-0ubuntu1~26.04.1
Actualiza a 10.0.113-10.0.13-0ubuntu1~26.04.1