CVE-2026-102870 — Critical ASP.NET Core remote code execution vulnerability (CVE-2026-102870)

43/100

A code injection vulnerability in ASP.NET Core allows unauthorized attackers to execute code remotely over a network.

• CVSS 8.8
• EPSS 0.9 %
• CWE-94

Digest of 2026-10-26

Sources

• Microsoft Security Response Center — CVE-2026-102870 ASP.NET Core Remote Code Execution Vulnerability