Microsoft Security Advisory CVE-2026-114156 - ASP.NET Core Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory provides guidance on updating affected applications and components. PathString.StartsWithSegments can mishandle percent-encoded backslashes and permit...

GHSA-8W29-6CJC-H6W4 Microsoft Security Advisory CVE-2026-114156 - ASP.NET Core Security Feature Bypass Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core. This advisory provides guidance on updating affected applications and components. PathString.StartsWithSegments can mishandle percent-encoded backslashes and permit...

PT-2026-143638

Name of the Vulnerable Software and Affected Versions ASP.NET Core versions 11.0.0-preview.7.26381.103 through 11.0.0-rc.3.26522.148 Description Improper input validation in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. Specifically, the...