CVE-2026-70175
Microsoft Security Advisory CVE-2026-70175 - ASP.NET Core Elevation of Privilege Vulnerability
Published Oct 13, 2026
Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. ASP.NET Core Identity password-reset and confirmation flows can send mail to the unvalidated request address instead of the user's stored canonical address.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · GitLab Advisory Database
Detected
Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. ASP.NET Core Identity password-reset and confirmation flows can send mail to the unvalidated request address instead
Affected
- nuget microsoft.aspnetcore.app.runtime.linux-armversion unspecified
- nuget microsoft.aspnetcore.app.runtime.linux-arm64version unspecified
- nuget microsoft.aspnetcore.app.runtime.linux-musl-armversion unspecified
- nuget microsoft.aspnetcore.app.runtime.linux-musl-arm64version unspecified
- nuget microsoft.aspnetcore.app.runtime.linux-musl-x64version unspecified
- nuget microsoft.aspnetcore.app.runtime.linux-x64version unspecified
- nuget microsoft.aspnetcore.app.runtime.osx-arm64version unspecified
- nuget microsoft.aspnetcore.app.runtime.osx-x64version unspecified
- nuget microsoft.aspnetcore.app.runtime.win-armversion unspecified
- nuget microsoft.aspnetcore.app.runtime.win-arm64version unspecified
- nuget microsoft.aspnetcore.app.runtime.win-x64version unspecified
- nuget microsoft.aspnetcore.app.runtime.win-x86version unspecified
Sources
- CVE.orgCVE-2026-70175
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-70175
30-day exploitation probability 0.6%
first.org - GitLab Advisory DatabaseCVE-2026-70175
Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.AspNetCore.Identity and Microsoft.AspNetCore.Identity.UI. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. ASP.NET Core Identity password-reset and confirmation flows can send mail to the unvalidated request address instead
advisories.gitlab.com