CVE-2026-25667

Description

References

• IsaJafarov/Kestrel-DoS · Exploit
• IsaJafarov/Q3Fuzz
• dotnet/aspnetcore commit 96ccc40 · Patch

Weitere Schwachstellen in .net

• CVE-2026-111497KRITISCH 9.8EXPLOITED (CISA KEV)A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows…
• CVE-2026-96960HOCH 7.5Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96959HOCH 7.5Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96958HOCH 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96957HOCH 8.8Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.