CVE-2026-25667

概要

参考情報

• IsaJafarov/Kestrel-DoS · Exploit
• IsaJafarov/Q3Fuzz
• dotnet/aspnetcore commit 96ccc40 · Patch

.net のその他の脆弱性

• CVE-2026-111497緊急 9.8悪用確認済み（CISA KEV）A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows…
• CVE-2026-96960高 7.5Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96959高 7.5Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96958高 7.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
• CVE-2026-96957高 8.8Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.