CVE Catalog
CVE-2026-62899
MediumCVSS 5.9Exploitation Probability (EPSS)
Elevated risk0.72%
51th percentile - higher than 51% of all known CVEs
Summary
An inconsistent interpretation of HTTP requests (HTTP request/response smuggling) vulnerability in .NET allows an unauthorized attacker to bypass a security feature over a network.
Risk Assessment
An unauthorized attacker could bypass security controls, potentially leading to unauthorized actions.
Recommendation
Update .NET to a version that includes fixes for this vulnerability.
Original NVD description (English source)
Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.