VDB

GCVE-110-NCSC-2026-123

GCVE-110-NCSC-2026-123
Advisory PublishedCVSS 9.1/10
Vulnetix · Advisory published April 22, 2026
An improper verification of cryptographic signatures in ASP.NET Core allows unauthorized attackers to remotely elevate privileges by exploiting signature validation flaws.
Download JSON Open in Console

Weaknesses (CWE)

CWE-347Improper Verification of Cryptographic Signature

Risk Scores

CVSS 3.1
9.1/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Affected Products

VendorProductVersionsPlatforms
Microsoftvers:unknown/*——

Aliases

CVE-2026-40372

References

advisory
advisory
advisory

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›