CVE-2026-114148
Full vulnerability record from the local CVENow database.
Description
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Awaiting Analysis
Source identifier
Published
2026-10-29 16:17:58.693000
Last modified
2026-10-30 14:16:38.440000
View original CVE JSON
{
"id": "CVE-2026-114148",
"sourceIdentifier": "[email protected]",
"published": "2026-10-29T16:17:58.693",
"lastModified": "2026-10-30T14:16:38.440",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Microsoft",
"product": ".NET 10.0 installed on Linux",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.403",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 10.0 installed on Mac OS",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.403",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 10.0 installed on Windows",
"versions": [
{
"version": "10.0.0",
"lessThan": "10.0.403",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 11.0 installed on Linux",
"versions": [
{
"version": "11.0.0-preview.1",
"lessThan": "11.0.100-rc.3",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 11.0 installed on Mac OS",
"versions": [
{
"version": "11.0.0-preview.1",
"lessThan": "11.0.100-rc.3",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 11.0 installed on Windows",
"versions": [
{
"version": "11.0.0-preview.1",
"lessThan": "11.0.100-rc.3",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 8.0 installed on Linux",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.427",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 8.0 installed on Mac OS",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.427",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 8.0 installed on Windows",
"versions": [
{
"version": "8.0.0",
"lessThan": "8.0.427",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 9.0 installed on Linux",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.320",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 9.0 installed on Mac OS",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.320",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET 9.0 installed on Windows",
"versions": [
{
"version": "9.0.0",
"lessThan": "9.0.320",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": ".NET source-build Linux tarballs (all archive types)",
"versions": [
{
"version": "8.0.100",
"lessThan": "10.0.403-servicing.26523.112",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "ASP.NET Core runtime and targeting-pack Linux tarballs (Microsoft-published)",
"versions": [
{
"version": "8.0.0",
"lessThan": "9.0.22",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-30T13:38:21.442156Z",
"id": "CVE-2026-114148",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-276"
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-114148",
"source": "[email protected]"
}
]
}