← Back to browse · API

CVE-2025-55315

Severity
CRITICAL
CVSS
9.9
EPSS
0.65838
Risk score
62.64
CISA KEV
No
PoC
No
Published
2025-10-14
Modified
2026-02-22
First seen
2026-08-07
Aliases
EUVD-2025-34426, GHSA-5RRX-JJJQ-Q2R5
Products
Microsoft:ASP.NET Core 2.3 2.3 <2.3.6, Microsoft:ASP.NET Core 8.0 8.0 <8.0.21, Microsoft:ASP.NET Core 9.0 9.0 <9.0.10, Microsoft:Microsoft Visual Studio 2022 version 17.10 17.10.0 <17.10.20, Microsoft:Microsoft Visual Studio 2022 version 17.12 17.12.0 <17.12.13, Microsoft:Microsoft Visual Studio 2022 version 17.14 17.14.0 <17.14.17
Sources
euvd EUVD-2025-34426

Description

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

References