Read the docs
Microsoft update

KB5091596

Security Update

View on Microsoft →

Fixed in

Fixes 1 record

Priority MEDIUM 60

Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.11205 Published 2026-04-21 Fixed in 10.0.7, 18.5.2 CWE-347