CVE-2026-69304

ASP.NET Core Denial of Service Vulnerability

Published Sep 8, 2026 CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Description
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-8cp2-47hg-mfgh Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability
History
Type Values Removed Values Added
First Time appeared Microsoft windows
CPEs cpe:2.3:a:microsoft:asp.net_core:11.0:rc1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Microsoft windows
Type Values Removed Values Added
First Time appeared Microsoft microsoft Visual Studio 2022
Microsoft microsoft Visual Studio 2026
Vendors & Products Microsoft microsoft Visual Studio 2022
Microsoft microsoft Visual Studio 2026
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Title ASP.NET Core Denial of Service Vulnerability
First Time appeared Microsoft
Microsoft .net
Microsoft asp.net Core
Microsoft visual Studio 2022
Microsoft visual Studio 2026
Weaknesses CWE-409
CPEs cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft .net
Microsoft asp.net Core
Microsoft visual Studio 2022
Microsoft visual Studio 2026
References
Metrics cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Nov 10, 2026, 9:36 PM
Reserved
Aug 3, 2026, 8:46 PM
Status
Analyzed
Published
Sep 8, 2026, 6:18 PM
Modified
Oct 30, 2026, 10:17 PM