This vulnerability in Microsoft .NET 10.0 (version 10.0.0) involves uncontrolled resource consumption that can be triggered remotely without authentication or user interaction, resulting in denial of service. The CVSS 3.1 base score is 7.5 (high), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. Microsoft has published an official fix to remediate this issue as detailed in their security update guide.

An attacker can remotely exploit this vulnerability to exhaust system resources, causing a denial of service condition on affected .NET 10.0 systems. There is no impact on confidentiality or integrity, only availability is affected. No known exploits have been reported in the wild so far.

Apply the official security update provided by Microsoft as referenced in their advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171) to remediate this vulnerability. Since an official fix is available, deploying the patch is the recommended mitigation. No additional action is required beyond applying the update.