CVE-2026-56170

🗓️ 14 Jul 2026 17:05:13Reported by microsoftType

CVE-2026-56170 concerns ASP.NET Core where resources are allocated without limits or throttling, enabling a network-based DoS from an unauthenticated attacker. The NVD entry attributes a CVSS v3.1 base score of 7.5 (HIGH) with network attack vecto...

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2026-56170	14 Jul 202617:05	–	attackerkb
Circl	CVE-2026-56170	14 Jul 202619:01	–	circl
Cvelist	CVE-2026-56170 ASP.NET Core Denial of Service Vulnerability	14 Jul 202617:05	–	cvelist
EUVD	EUVD-2026-44045	14 Jul 202617:05	–	euvd
Microsoft KB	.NET 8.0 Update - July 14, 2026	14 Jul 202614:00	–	mskb
Microsoft KB	.NET 9.0 Update - July 14, 2026	14 Jul 202614:00	–	mskb
Microsoft KB	.NET 10.0 Update - July 14, 2026	14 Jul 202614:00	–	mskb
Microsoft CVE	ASP.NET Core Denial of Service Vulnerability	14 Jul 202614:00	–	mscve
NCSC	vulnerabilities handled in Microsoft Developer Tools	14 Jul 202618:37	–	ncsc
NVD	CVE-2026-56170	14 Jul 202617:17	–	nvd

Vulners

CNA

Node

microsoft .net_frameworkRange10.0.0–10.0.6

Node

microsoft .net_frameworkRange8.0.0–8.0.29

Node

microsoft .net_frameworkRange9.0.0–9.0.18

[
  {
    "vendor": "Microsoft",
    "product": ".NET 10.0",
    "versions": [
      {
        "version": "10.0.0",
        "lessThan": "10.0.6",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 8.0",
    "versions": [
      {
        "version": "8.0.0",
        "lessThan": "8.0.29",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": ".NET 9.0",
    "versions": [
      {
        "version": "9.0.0",
        "lessThan": "9.0.18",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56170

14 Jul 2026 20:34Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.5

SSVC

CWE-770