Known vulnerabilities in ASP.NET Core 8.0.2

Vendor: Microsoft
Software: ASP.NET Core
Version: 8.0.2
Software CPE: cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ASP.NET Core version 8.0.2 ASP.NET Core 8.0.2 is affected by 4 vulnerabilities: 2 high, 2 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134477 - Resource exhaustion
CVE-2026-45591
CWE-400 Medium
No
No
8.0.28, 9.0.17 12.06.2026 SB2026061277
SB2026061283
SB2026061284
and 10 more
#VU117236 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-55315
CWE-444 Medium
Public exploit available
No
8.0.21 8.0.21, 9.0.10 9.0.10 15.10.2025 SB2025101593
SB20251015138
SB20251015139
and 9 more
#VU107240 - Allocation of Resources Without Limits or Throttling
CVE-2025-26682
CWE-770 High
No
No
8.0.16 8.0.16, 9.0.5 9.0.5 08.04.2025 SB2025040897
#VU105568 - Improper Authentication
CVE-2025-24070
CWE-287 High
No
No
8.0.14 8.0.14, 9.0.3 9.0.3 11.03.2025 SB20250311101
SB2025031215
SB2025031778
and 4 more