CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionNVD
Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.
AnalysisAI
Denial-of-service condition in Microsoft .NET Framework 8.0, 9.0, and 10.0 allows unauthenticated remote attackers to exhaust system resources through network-based uncontrolled resource consumption. Affects .NET 8.0 versions prior to 8.0.26, .NET 9.0 versions prior to 9.0.15, and .NET 10.0 versions prior to 10.0.6. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all systems running .NET 8.0 (pre-8.0.26), .NET 9.0 (pre-9.0.15), or .NET 10.0 (pre-10.0.6) via asset inventory and configuration management systems. Within 7 days: Deploy vendor patches to .NET 8.0.26 or later, .NET 9.0.15 or later, and .NET 10.0.6 or later across all development, staging, and production environments; prioritize internet-facing applications. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-22404
GHSA-w3x6-4m5h-cxqf