CVE-2025-7326 (GCVE-0-2025-7326)
Vulnerability from cvelistv5
Published
2025-07-08 14:31
Modified
2025-07-22 15:20
CWE
Summary
Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.
Impacted products
Vendor Product Version
Microsoft ASP.NET Core 6.0 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.Identity Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.win-arm Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.win-arm64 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.win-x64 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.win-x86 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.linux-arm Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.linux-arm64 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-arm Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-x64 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.linux-x64 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.osx-arm64 Version: >=6.0.0    6.0.36
Create a notification for this product.
   Microsoft Microsoft.AspNetCore.App.Runtime.osx-x64 Version: >=6.0.0    6.0.36
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-7326",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-22T15:20:38.013408Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-22T15:20:41.162Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://www.herodevs.com/vulnerability-directory/cve-2025-7326?nes-for-.net"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Unknown"
          ],
          "product": "ASP.NET Core 6.0",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.Identity",
          "platforms": [
            "Windows",
            "Linux",
            "MacOS"
          ],
          "product": "Microsoft.AspNetCore.Identity",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.win-arm",
          "platforms": [
            "Windows"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.win-arm",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.win-arm64",
          "platforms": [
            "Windows"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.win-arm64",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.win-x64",
          "platforms": [
            "Windows"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.win-x64",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.win-x86",
          "platforms": [
            "Windows"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.win-x86",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.linux-arm",
          "platforms": [
            "Linux"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.linux-arm",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.linux-arm64",
          "platforms": [
            "Linux"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.linux-arm64",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm",
          "platforms": [
            "Linux"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64",
          "platforms": [
            "Linux"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.linux-musl-arm64",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64",
          "platforms": [
            "Linux"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.linux-musl-x64",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.linux-x64",
          "platforms": [
            "Linux"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.linux-x64",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.osx-arm64",
          "platforms": [
            "MacOS"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.osx-arm64",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageName": "Microsoft.AspNetCore.App.Runtime.osx-x64",
          "platforms": [
            "MacOS"
          ],
          "product": "Microsoft.AspNetCore.App.Runtime.osx-x64",
          "vendor": "Microsoft",
          "versions": [
            {
              "lessThanOrEqual": "6.0.36",
              "status": "affected",
              "version": "\u003e=6.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "datePublic": "2025-07-08T14:30:00.000Z",
      "descriptions": [
        {
          "lang": "en-US",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eWeak authentication in \u003cb\u003eEOL\u0026nbsp;\u003c/b\u003eASP.NET Core allows an unauthorized attacker to elevate privileges over a network.\u003c/p\u003e\u003cb\u003e\u003c/b\u003e\u003cp\u003e\u003cb\u003eNOTE:\u003c/b\u003e This CVE affects only\u003cb\u003e End Of Life (EOL)\u003c/b\u003e\u0026nbsp;software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.\u003c/p\u003e"
            }
          ],
          "value": "Weak authentication in EOL\u00a0ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.\n\nNOTE: This CVE affects only End Of Life (EOL)\u00a0software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1390",
              "description": "CWE-1390: Weak Authentication",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-10T17:30:15.501Z",
        "orgId": "36c7be3b-2937-45df-85ea-ca7133ea542c",
        "shortName": "HeroDevs"
      },
      "references": [
        {
          "name": "ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability",
          "tags": [
            "related"
          ],
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-24070"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24070"
        },
        {
          "url": "https://www.herodevs.com/vulnerability-directory/cve-2025-7326"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "EOL ASP.NET Core Elevation of Privilege Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36c7be3b-2937-45df-85ea-ca7133ea542c",
    "assignerShortName": "HeroDevs",
    "cveId": "CVE-2025-7326",
    "datePublished": "2025-07-08T14:31:45.633Z",
    "dateReserved": "2025-07-07T15:43:27.241Z",
    "dateUpdated": "2025-07-22T15:20:41.162Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-7326\",\"sourceIdentifier\":\"36c7be3b-2937-45df-85ea-ca7133ea542c\",\"published\":\"2025-07-08T15:15:34.623\",\"lastModified\":\"2025-07-22T16:15:34.750\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Weak authentication in EOL\u00a0ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.\\n\\nNOTE: This CVE affects only End Of Life (EOL)\u00a0software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.\"},{\"lang\":\"es\",\"value\":\"La autenticaci\u00f3n d\u00e9bil en EOL ASP.NET Core permite a un atacante no autorizado elevar privilegios en una red. NOTA: Esta CVE solo afecta a los componentes de software al final de su vida \u00fatil (EOL). El proveedor, Microsoft, ha indicado que no se ofrecer\u00e1n actualizaciones ni soporte t\u00e9cnico en el futuro si se solicita.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"36c7be3b-2937-45df-85ea-ca7133ea542c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":4.7}]},\"weaknesses\":[{\"source\":\"36c7be3b-2937-45df-85ea-ca7133ea542c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1390\"}]}],\"references\":[{\"url\":\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24070\",\"source\":\"36c7be3b-2937-45df-85ea-ca7133ea542c\"},{\"url\":\"https://www.cve.org/CVERecord?id=CVE-2025-24070\",\"source\":\"36c7be3b-2937-45df-85ea-ca7133ea542c\"},{\"url\":\"https://www.herodevs.com/vulnerability-directory/cve-2025-7326\",\"source\":\"36c7be3b-2937-45df-85ea-ca7133ea542c\"},{\"url\":\"https://www.herodevs.com/vulnerability-directory/cve-2025-7326?nes-for-.net\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-7326\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-07-22T15:20:38.013408Z\"}}}], \"references\": [{\"url\": \"https://www.herodevs.com/vulnerability-directory/cve-2025-7326?nes-for-.net\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-07-08T15:05:40.408Z\"}}], \"cna\": {\"title\": \"EOL ASP.NET Core Elevation of Privilege Vulnerability\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Microsoft\", \"product\": \"ASP.NET Core 6.0\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Unknown\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.Identity\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Windows\", \"Linux\", \"MacOS\"], \"packageName\": \"Microsoft.AspNetCore.Identity\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.win-arm\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Windows\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.win-arm\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.win-arm64\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Windows\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.win-arm64\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.win-x64\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Windows\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.win-x64\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.win-x86\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Windows\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.win-x86\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.linux-arm\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Linux\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.linux-arm\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.linux-arm64\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Linux\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.linux-arm64\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.linux-musl-arm\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Linux\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.linux-musl-arm\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Linux\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.linux-musl-arm64\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.linux-musl-x64\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Linux\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.linux-musl-x64\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.linux-x64\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"Linux\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.linux-x64\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.osx-arm64\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"MacOS\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.osx-arm64\", \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Microsoft\", \"product\": \"Microsoft.AspNetCore.App.Runtime.osx-x64\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e=6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.36\"}], \"platforms\": [\"MacOS\"], \"packageName\": \"Microsoft.AspNetCore.App.Runtime.osx-x64\", \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2025-07-08T14:30:00.000Z\", \"references\": [{\"url\": \"https://www.cve.org/CVERecord?id=CVE-2025-24070\", \"name\": \"ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability\", \"tags\": [\"related\"]}, {\"url\": \"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24070\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.herodevs.com/vulnerability-directory/cve-2025-7326\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en-US\", \"value\": \"Weak authentication in EOL\\u00a0ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.\\n\\nNOTE: This CVE affects only End Of Life (EOL)\\u00a0software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eWeak authentication in \u003cb\u003eEOL\u0026nbsp;\u003c/b\u003eASP.NET Core allows an unauthorized attacker to elevate privileges over a network.\u003c/p\u003e\u003cb\u003e\u003c/b\u003e\u003cp\u003e\u003cb\u003eNOTE:\u003c/b\u003e This CVE affects only\u003cb\u003e End Of Life (EOL)\u003c/b\u003e\u0026nbsp;software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-1390\", \"description\": \"CWE-1390: Weak Authentication\"}]}], \"providerMetadata\": {\"orgId\": \"36c7be3b-2937-45df-85ea-ca7133ea542c\", \"shortName\": \"HeroDevs\", \"dateUpdated\": \"2025-07-10T17:30:15.501Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-7326\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-07-22T15:20:41.162Z\", \"dateReserved\": \"2025-07-07T15:43:27.241Z\", \"assignerOrgId\": \"36c7be3b-2937-45df-85ea-ca7133ea542c\", \"datePublished\": \"2025-07-08T14:31:45.633Z\", \"assignerShortName\": \"HeroDevs\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…