Vulnerability
CVE-2026-114148
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
CVSS score (v3.1)7.8High
Not on CISA KEV list
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Timeline
- First covered by RedTeamDaily
- Published by NVD
- Last updated by NVD
Coverage
Sources: NVD and CISA known exploited vulnerabilities catalogue.