Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 15, 2026 · NIST NVD

   Detected

   Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

2. Oct 15, 2026 · CVE.org

   Updated

   Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

3. Oct 16, 2026 · NIST NVD

   Updated

   Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

Affected

• vendor Microsoft Microsoft Visual Studio 2022 version 17.14version unspecified
• vendor Microsoft Microsoft Visual Studio 2026 version 18.10version unspecified
• vendor Microsoft System.Formats.Cborversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-109468

  Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  cve.org
• NIST NVDVulnerability recordCVE-2026-109468

  Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

  nvd.nist.gov

References

• Reference · msrc.microsoft.com