Vulnerabilities
Update .NET 8-11 Now: SignalR Flaw CVE-2026-70159 Lets Attackers Crash Servers via Resource Exhaustion
Microsoft releases fixes for a resource exhaustion flaw in ASP.NET Core SignalR that allows remote attackers to deny service.
ASP.NET Core
Everything Shell Bulletin has reported about ASP.NET Core: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apply Microsoft patches for ASP.NET Core 8-11 to stop HTTP request smuggling across Windows, Linux, and macOS
Microsoft patches a critical vulnerability in ASP.NET Core versions 8 through 11 that allows unauthorized network tampering via HTTP request smuggling.