This vulnerability, tracked as CVE-2026-40372 and classified under CWE-347, affects Microsoft ASP.NET Core 10.0. It arises from improper verification of cryptographic signatures, enabling remote attackers to escalate privileges. The CVSS v3.1 score is 9.1 (critical), with attack vector network, low complexity, no privileges or user interaction required, and high confidentiality and integrity impacts. Microsoft has provided an official fix for this vulnerability. Red Hat advisories confirm that their products are not affected as the issue is specific to Microsoft.AspNetCore.DataProtection 10.0.6 from NuGet.

An attacker can remotely exploit this vulnerability to elevate privileges without requiring any prior authentication or user interaction. This can lead to unauthorized access to sensitive data and modification of application integrity. There is no impact on availability. The vulnerability poses a critical risk to confidentiality and integrity of affected systems running ASP.NET Core 10.0.

An official fix is available from Microsoft for ASP.NET Core 10.0. Users should apply the vendor-provided patch promptly to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update. Red Hat products are not affected by this vulnerability. No additional mitigations are specified beyond applying the official fix.