Apr 2026: ASP.NET Core Elevation of Privilege Vulnerability
CVE-2026-40372 Published on April 21, 2026
ASP.NET Core Elevation of Privilege Vulnerability
Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Weakness Type
Improper Verification of Cryptographic Signature
The software does not verify, or incorrectly verifies, the cryptographic signature for data.
Products Associated with CVE-2026-40372
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-40372 are published in these products:
Affected Versions
Microsoft ASP.NET Core 10.0:- Version 10.0 and below 10.0.7 is affected.
- Version 18.5.0 and below 18.5.2 is affected.