CVE-2026-69304: ASP.NET Core Denial of Service Vulnerability

Published Sep 8, 2026

Updated

ASP.NET Core Denial of Service Vulnerability

Other sources

Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

— Microsoft

Affected Software

1 affected component

Microsoft ASP.NET Core

Event History

Sep 8, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·05:17 PM

Data Sourced

via MITRE·05:17 PM

DescriptionSeverity

Data Sourced

via NVD·06:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker can attempt exploitation remotely over the network without authentication or user interaction. Exploitation requires highly compressed data that triggers data amplification, and the listed attack complexity is high.

What is the expected impact of a successful attack?

The stated impact is denial of service against ASP.NET Core. The provided vector indicates availability impact only, with no listed confidentiality or integrity impact.

CVE-2026-69304: ASP.NET Core Denial of Service Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected impact of a successful attack?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected impact of a successful attack?