CVE-2025-7326

High CVSS: 7.0

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

Vendor

Product

CWE

CWE-1390

Yayın Tarihi

2025-07-08 15:15:34

Güncelleme

2025-07-22 16:15:34

Source Identifier

36c7be3b-2937-45df-85ea-ca7133ea542c

KEV Date Added

Kategoriler

CWE-1390 HIGH 2025

Referanslar

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24070 https://www.cve.org/CVERecord?id=CVE-2025-24070 https://www.herodevs.com/vulnerability-directory/cve-2025-7326 https://www.herodevs.com/vulnerability-directory/cve-2025-7326?nes-for-.net