CVE-2026-114148 — ASP.NET Core default permissions flaw permits local privilege escalation

43/100

Microsoft reports that CVE-2026-114148 involves incorrect default permissions in ASP.NET Core. An authorized attacker can exploit it to elevate privileges locally; the supplied excerpt does not identify affected versions or remediation.

Digest of 2026-10-26

Sources

• Microsoft Security Response Center — CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability