CVE-2026-102870 (GCVE-0-2026-102870)
Vulnerability from cvelistv5
Published
2026-10-13 19:01
Modified
2026-10-28 18:21
CWE
  • CWE-94 - Improper Control of Generation of Code ('Code Injection')
Summary
Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.
Impacted products
Vendor Product Version
Microsoft .NET 10.0 installed on Linux Version: 10.0.0   < 10.0.403
Create a notification for this product.
   Microsoft .NET 10.0 installed on Mac OS Version: 10.0.0   < 10.0.403
Create a notification for this product.
   Microsoft .NET 10.0 installed on Windows Version: 10.0.0   < 10.0.403
Create a notification for this product.
   Microsoft .NET 11.0 installed on Linux Version: 11.0.0-preview.1   < 11.0.100-rc.3
Create a notification for this product.
   Microsoft .NET 11.0 installed on Mac OS Version: 11.0.0-preview.1   < 11.0.100-rc.3
Create a notification for this product.
   Microsoft .NET 11.0 installed on Windows Version: 11.0.0-preview.1   < 11.0.100-rc.3
Create a notification for this product.
   Microsoft Microsoft Visual Studio 2019 version 16.11 Version: 16.11.0   < 16.11.61
Create a notification for this product.
   Microsoft Microsoft Visual Studio 2022 version 17.14 Version: 17.14.0   < 17.14.43
Create a notification for this product.
   Microsoft Microsoft Visual Studio 2026 version 18.10 Version: 18.10.0   < 18.10.4
Create a notification for this product.
   Microsoft Microsoft Visual Studio 2026 version 18.11 Version: 18.11.0   < 18.11.2
Create a notification for this product.
   Microsoft Microsoft Visual Studio 2026 version 18.12 Version: 18.12.0   < 18.12 Insiders 3
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.Components.WebAssembly.DevServer Version: 11.0.0-preview.1   < 10.0.14
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.Components.WebAssembly.Server Version: 10.0.0   < 10.0.13
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102870",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-08T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T03:57:17.954Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": ".NET 10.0 installed on Linux",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.403",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 10.0 installed on Mac OS",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.403",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 10.0 installed on Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.403",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 11.0 installed on Linux",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "11.0.100-rc.3",
              "status": "affected",
              "version": "11.0.0-preview.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 11.0 installed on Mac OS",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "11.0.100-rc.3",
              "status": "affected",
              "version": "11.0.0-preview.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": ".NET 11.0 installed on Windows",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "11.0.100-rc.3",
              "status": "affected",
              "version": "11.0.0-preview.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2019 version 16.11",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "16.11.61",
              "status": "affected",
              "version": "16.11.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2022 version 17.14",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "17.14.43",
              "status": "affected",
              "version": "17.14.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.10",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.10.4",
              "status": "affected",
              "version": "18.10.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.11",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.11.2",
              "status": "affected",
              "version": "18.11.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft Visual Studio 2026 version 18.12",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "18.12 Insiders 3",
              "status": "affected",
              "version": "18.12.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Microsoft.AspNetCore.Components.WebAssembly.DevServer",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.14",
              "status": "affected",
              "version": "11.0.0-preview.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            ".NET 10.0 runtime installed on Linux",
            ".NET 10.0 runtime installed on Mac OS",
            ".NET 10.0 runtime installed on Windows",
            ".NET 11.0 runtime installed on Linux",
            ".NET 11.0 runtime installed on Mac OS",
            ".NET 11.0 runtime installed on Windows"
          ],
          "product": "Microsoft.AspNetCore.Components.WebAssembly.Server",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThan": "10.0.13",
              "status": "affected",
              "version": "10.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.10:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.10.4",
                  "versionStartIncluding": "18.10.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "17.14.43",
                  "versionStartIncluding": "17.14.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:microsoft.aspnetcore.components.webassembly.server:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.13",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:microsoft.aspnetcore.components.webassembly.devserver:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.14",
                  "versionStartIncluding": "11.0.0-preview.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.403",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.403",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "10.0.403",
                  "versionStartIncluding": "10.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.0.100-rc.3",
                  "versionStartIncluding": "11.0.0-preview.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.0.100-rc.3",
                  "versionStartIncluding": "11.0.0-preview.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "11.0.100-rc.3",
                  "versionStartIncluding": "11.0.0-preview.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2019_version_16.11:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "16.11.61",
                  "versionStartIncluding": "16.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.11.2",
                  "versionStartIncluding": "18.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "18.12 Insiders 3",
                  "versionStartIncluding": "18.12.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-10-13T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Improper control of generation of code (\u0027code injection\u0027) in ASP.NET Core allows an unauthorized attacker to execute code over a network."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-28T18:21:14.659Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "ASP.NET Core Remote Code Execution Vulnerability",
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870"
        }
      ],
      "title": "ASP.NET Core Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2026-102870",
    "datePublished": "2026-10-13T19:01:30.882Z",
    "dateReserved": "2026-09-29T17:27:07.500Z",
    "dateUpdated": "2026-10-28T18:21:14.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-102870\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-13T21:13:52.793704Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-13T21:13:53.475Z\"}}], \"cna\": {\"title\": \"ASP.NET Core Remote Code Execution Vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \".NET 10.0 installed on Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.403\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 10.0 installed on Mac OS\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.403\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 10.0 installed on Windows\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.403\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 11.0 installed on Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.0.0-preview.1\", \"lessThan\": \"11.0.100-rc.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 11.0 installed on Mac OS\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.0.0-preview.1\", \"lessThan\": \"11.0.100-rc.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \".NET 11.0 installed on Windows\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.0.0-preview.1\", \"lessThan\": \"11.0.100-rc.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2019 version 16.11\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.11.0\", \"lessThan\": \"16.11.61\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2022 version 17.14\", \"versions\": [{\"status\": \"affected\", \"version\": \"17.14.0\", \"lessThan\": \"17.14.43\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2026 version 18.10\", \"versions\": [{\"status\": \"affected\", \"version\": \"18.10.0\", \"lessThan\": \"18.10.4\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2026 version 18.11\", \"versions\": [{\"status\": \"affected\", \"version\": \"18.11.0\", \"lessThan\": \"18.11.2\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft Visual Studio 2026 version 18.12\", \"versions\": [{\"status\": \"affected\", \"version\": \"18.12.0\", \"lessThan\": \"18.12 Insiders 3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.Components.WebAssembly.DevServer\", \"versions\": [{\"status\": \"affected\", \"version\": \"11.0.0-preview.1\", \"lessThan\": \"10.0.14\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.Components.WebAssembly.Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"10.0.0\", \"lessThan\": \"10.0.13\", \"versionType\": \"custom\"}], \"platforms\": [\".NET 10.0 runtime installed on Linux\", \".NET 10.0 runtime installed on Mac OS\", \".NET 10.0 runtime installed on Windows\", \".NET 11.0 runtime installed on Linux\", \".NET 11.0 runtime installed on Mac OS\", \".NET 11.0 runtime installed on Windows\"]}], \"datePublic\": \"2026-10-13T14:00:00.000Z\", \"references\": [{\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102870\", \"name\": \"ASP.NET Core Remote Code Execution Vulnerability\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Improper control of generation of code (\u0027code injection\u0027) in ASP.NET Core allows an unauthorized attacker to execute code over a network.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-94\", \"description\": \"CWE-94: Improper Control of Generation of Code (\u0027Code Injection\u0027)\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.10:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"18.10.4\", \"versionStartIncluding\": \"18.10.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"17.14.43\", \"versionStartIncluding\": \"17.14.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:microsoft.aspnetcore.components.webassembly.server:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.13\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:microsoft.aspnetcore.components.webassembly.devserver:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.14\", \"versionStartIncluding\": \"11.0.0-preview.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net_10.0_installed_on_windows:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.403\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net_10.0_installed_on_linux:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.403\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net_10.0_installed_on_mac_os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"10.0.403\", \"versionStartIncluding\": \"10.0.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net_11.0_installed_on_windows:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"11.0.100-rc.3\", \"versionStartIncluding\": \"11.0.0-preview.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net_11.0_installed_on_linux:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"11.0.100-rc.3\", \"versionStartIncluding\": \"11.0.0-preview.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:.net_11.0_installed_on_mac_os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"11.0.100-rc.3\", \"versionStartIncluding\": \"11.0.0-preview.1\"}, {\"criteria\": \"cpe:2.3:a:microsoft:microsoft_visual_studio_2019_version_16.11:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"16.11.61\", \"versionStartIncluding\": \"16.11.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.11:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"18.11.2\", \"versionStartIncluding\": \"18.11.0\"}, {\"criteria\": \"cpe:2.3:a:microsoft:microsoft_visual_studio_2026_version_18.12:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"18.12 Insiders 3\", \"versionStartIncluding\": \"18.12.0\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\", \"dateUpdated\": \"2026-10-27T21:35:55.905Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-102870\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-10-27T21:35:55.905Z\", \"dateReserved\": \"2026-09-29T17:27:07.500Z\", \"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"datePublished\": \"2026-10-13T19:01:30.882Z\", \"assignerShortName\": \"microsoft\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…