Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An unauthenticated attacker could exploit this vulnerability by submitting a password reset request using a specially crafted email address that is treated as equivalent to another account. Successful exploitation could allow the attacker to take over the targeted account. No user interaction is required.
According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?
Successful exploitation requires the attacker to control a distinct email address that an affected application's account lookup treats as equivalent to the victim's address, while messages are delivered to a different mailbox.
Security updates
9.0.13 — https://github.com/dotnet/Scaffolding/security/advisories/GHSA-jxmf-523q-f7r7
Vulnerabilities 1
-
High 8.1
ASP.NET Core Elevation of Privilege Vulnerability
Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Revision history
-
#2
Changes made to the security updates links and information. This is an informational change only.
-
#1
Information published.
References
-
CVE-2026-118741 ASP.NET Core Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118741
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss