.NET 10.0 contains an elevation of privilege vulnerability in ASP.NET Core identified as CVE-2026-114148. This issue affects multiple .NET runtimes including 8.0, 9.0, 10.0, and 11.0. Red Hat has released updates to SDK 10.0.114 and Runtime 10.0.14 to address this vulnerability along with other bug fixes and enhancements. The update is rated as Important by Red Hat Product Security. No public exploits or in-the-wild exploitation have been reported.