CVE-2026-26130
High · 7.5CVSS
7.5
EPSS
2.5%
Published
Mar 10, 2026
CISA due date
—
The record
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | dotnet-bootstrap-9 | 0 | 9.0.115-r0 |
| Wolfi | dotnet-bootstrap-9 | 0 | 9.0.115-r0 |
Related vulnerabilities
- CVE-2026-26127 Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. Also affects dotnet-bootstrap-9
- CVE-2025-55315 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability Also affects dotnet-bootstrap-9
- CVE-2024-43498 .NET Remote Code Execution Vulnerability Also affects dotnet-bootstrap-9
- CVE-2024-43499 .NET Denial of Service Vulnerability Also affects dotnet-bootstrap-9
- CVE-2026-114731 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled… CWE-770
- CVE-2026-96377 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined… CWE-770
- CVE-2026-96365 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform… CWE-770
- CVE-2026-114723 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource… CWE-770