CVE-2026-40372

CriticalCVSS 9.1

Published: 21/04/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

11.21%

95th percentile - higher than 95% of all known CVEs

Summary

A vulnerability in ASP.NET Core due to improper verification of cryptographic signature allows an unauthorized attacker to elevate privileges over a network.

Risk Assessment

An attacker can gain elevated privileges within the application, leading to data confidentiality and integrity breaches and potential system compromise.

Recommendation

Immediately update ASP.NET Core to the latest patched version and review authentication and cryptographic signature configurations.

Original NVD description (English source)

Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.