CVE-2026-70179High· 7.5▾ TwilightAuthentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
Microsoft.AspNetCore.Authentication.Negotiate >= 10.0.0, <= 10.0.12Microsoft.AspNetCore.Authentication.Negotiate >= 8.0.0, <= 8.0.31Microsoft.AspNetCore.Authentication.Negotiate >= 9.0.0, <= 9.0.20Patched in:
Microsoft.AspNetCore.Authentication.Negotiate 10.0.13Microsoft.AspNetCore.Authentication.Negotiate 8.0.32Microsoft.AspNetCore.Authentication.Negotiate 9.0.21Connected by shared product, vendor, weakness, or advisory.
CVE-2025-65046Low· 3.1Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2026-48567Critical· 10.0Azure HorizonDB Elevation of Privilege Vulnerability
CVE-2026-69843Critical· 10.0Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-77903Critical· 9.0Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized attacker to elevate privileges over a network.
CVE-2024-30058Medium· 5.4Microsoft Edge (Chromium-based) Spoofing Vulnerability
GHSA-86xp-94pg-8r6rMedium· 5.3Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability