CVE-2026-114148
High · 7.8CVSS
7.8
EPSS
—
Published
Oct 29, 2026
CISA due date
—
The record
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-107052 Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead… CWE-276
- CVE-2026-112357 GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before… CWE-276
- CVE-2026-115253 An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory… CWE-276
- CVE-2026-11813 A potential improper permissions vulnerability was reported in the Lenovo Filez Client… CWE-276
- CVE-2026-52766 YesWiki is a wiki system written in PHP. CWE-276
- CVE-2026-77393 In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped… CWE-276
- CVE-2026-75166 Insecure Permission vulnerability in MBS-Solutions X-Serie Gateway firmware V6_00_05… CWE-276
- CVE-2026-81302 PALLET CONTROL products contain an incorrect default permission vulnerability, which may… CWE-276