CVE-2026-114148
High
Description
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
SeverityHigh
CVSS7.8
Exploit probability—
Product
.NET 10.0 installed on Linux
PublishedOct 29, 2026
First seenNov 4, 2026
Weakness typeCWE-276CWE-276
How to fix
Update
- Microsoft .NET 10.0 installed on Linux10.0.403 or later
- Microsoft .NET 10.0 installed on Mac OS10.0.403 or later
- Microsoft .NET 10.0 installed on Windows10.0.403 or later
- Microsoft .NET 11.0 installed on Linux11.0.100-rc.3 or later
- Microsoft .NET 11.0 installed on Mac OS11.0.100-rc.3 or later
- Microsoft .NET 11.0 installed on Windows11.0.100-rc.3 or later
- Microsoft .NET 8.0 installed on Linux8.0.427 or later
- Microsoft .NET 8.0 installed on Mac OS8.0.427 or later
- Microsoft .NET 8.0 installed on Windows8.0.427 or later
- Microsoft .NET 9.0 installed on Linux9.0.320 or later
- Microsoft .NET 9.0 installed on Mac OS9.0.320 or later
- Microsoft .NET 9.0 installed on Windows9.0.320 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET 10.0 installed on Linux | 10.0.0 ≤ v < 10.0.403 | 10.0.403 |
| Microsoft .NET 10.0 installed on Mac OS | 10.0.0 ≤ v < 10.0.403 | 10.0.403 |
| Microsoft .NET 10.0 installed on Windows | 10.0.0 ≤ v < 10.0.403 | 10.0.403 |
| Microsoft .NET 11.0 installed on Linux | 11.0.0-preview.1 ≤ v < 11.0.100-rc.3 | 11.0.100-rc.3 |
| Microsoft .NET 11.0 installed on Mac OS | 11.0.0-preview.1 ≤ v < 11.0.100-rc.3 | 11.0.100-rc.3 |
| Microsoft .NET 11.0 installed on Windows | 11.0.0-preview.1 ≤ v < 11.0.100-rc.3 | 11.0.100-rc.3 |
| Microsoft .NET 8.0 installed on Linux | 8.0.0 ≤ v < 8.0.427 | 8.0.427 |
| Microsoft .NET 8.0 installed on Mac OS | 8.0.0 ≤ v < 8.0.427 | 8.0.427 |
| Microsoft .NET 8.0 installed on Windows | 8.0.0 ≤ v < 8.0.427 | 8.0.427 |
| Microsoft .NET 9.0 installed on Linux | 9.0.0 ≤ v < 9.0.320 | 9.0.320 |
| Microsoft .NET 9.0 installed on Mac OS | 9.0.0 ≤ v < 9.0.320 | 9.0.320 |
| Microsoft .NET 9.0 installed on Windows | 9.0.0 ≤ v < 9.0.320 | 9.0.320 |
| Microsoft .NET source-build Linux tarballs (all archive types) | 8.0.100 ≤ v < 10.0.403-servicing.26523.112 | 10.0.403-servicing.26523.112 |
| Microsoft ASP.NET Core runtime and targeting-pack Linux tarballs (Microsoft-published) | 8.0.0 ≤ v < 9.0.22 | 9.0.22 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.