Skip to content
OpenAdvisories
High · 8.1 CVE-2026-118741 EUVD-2026-122509GHSA-4392-4wfc-vgqg

ASP.NET Core Elevation of Privilege Vulnerability

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Microsoft.dotnet-scaffold version 10.0 Product: Microsoft.dotnet-scaffold version 20.x Product: Microsoft.dotnet-scaffold-aspnet version 10.0.0-rc.1.25458.5 Product: Microsoft.dotnet-scaffold-aspnet version 10.0.0-rc.1.25468.1 Product: Microsoft.dotnet-scaffold-aspnet version 9.0 Product: Microsoft.dotnet-scaffold-aspnet version 9.0.0-preview.8.24467.5 Product: Microsoft.dotnet-scaffold-aspnet version 9.0.0-preview.9.24509.5 Product: Microsoft.DotNet.Web.ProjectTemplates.10.0 Product: Microsoft.DotNet.Web.ProjectTemplates.8.0 Product: Microsoft.DotNet.Web.ProjectTemplates.9.0 Product: Microsoft.VisualStudio.Web.CodeGeneration.Design Product: Microsoft.VisualStudio.Web.CodeGeneration.Design version 10.0 Product: Microsoft.VisualStudio.Web.CodeGeneration.Design version 11.0.0-preview.1.26156.3 Product: Microsoft.VisualStudio.Web.CodeGeneration.Design version 8.0 Product: Microsoft.VisualStudio.Web.CodeGeneration.Design version 9.0 Product: Microsoft.VisualStudio.Web.CodeGenerators.Mvc Product: Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 10.0 Product: Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 11.0.0-preview.1.26156.3 Product: Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 8.0 Product: Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 9.0 Package: dotnet10-runtime Package: dotnet7 Package: dotnet8-runtime Package: dotnet9-runtime Ecosystem: Alpine Ecosystem: Ubuntu

Description

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft.dotnet-scaffold version 10.0 10.0.0 – < 20.3.0 20.3.0
Microsoft Microsoft.dotnet-scaffold version 20.x 20.0.0-preview.1.26156.3 – < 20.3.0 20.3.0
Microsoft Microsoft.dotnet-scaffold-aspnet version 10.0.0-rc.1.25458.5 10.0.0-rc.1.25458.5 – < 20.3.0 20.3.0
Microsoft Microsoft.dotnet-scaffold-aspnet version 10.0.0-rc.1.25468.1 10.0.0-rc.1.25468.1 – < 20.3.0 20.3.0
Microsoft Microsoft.dotnet-scaffold-aspnet version 9.0 9.0.0 – < 20.3.0 20.3.0
Microsoft Microsoft.dotnet-scaffold-aspnet version 9.0.0-preview.8.24467.5 9.0.0-preview.8.24467.5 – < 20.3.0 20.3.0
Microsoft Microsoft.dotnet-scaffold-aspnet version 9.0.0-preview.9.24509.5 9.0.0-preview.9.24509.5 – < 20.3.0 20.3.0
Microsoft Microsoft.DotNet.Web.ProjectTemplates.10.0 10.0.13 – < 10.0.15 10.0.15
Microsoft Microsoft.DotNet.Web.ProjectTemplates.8.0 8.0.32 – < 8.0.34 8.0.34
Microsoft Microsoft.DotNet.Web.ProjectTemplates.9.0 9.0.21 – < 9.0.23 9.0.23
Microsoft Microsoft.VisualStudio.Web.CodeGeneration.Design NOT_YET_AVAILABLE – < 9.0.13 9.0.13
Microsoft Microsoft.VisualStudio.Web.CodeGeneration.Design version 10.0 10.0.0-rc.1.25458.5 – < 10.0.3 10.0.3
Microsoft Microsoft.VisualStudio.Web.CodeGeneration.Design version 11.0.0-preview.1.26156.3 11.0.0-preview.1.26156.3 – < publication publication
Microsoft Microsoft.VisualStudio.Web.CodeGeneration.Design version 11.0.0-preview.1.26230.3 11.0.0-preview.1.26230.3 – < publication publication
Microsoft Microsoft.VisualStudio.Web.CodeGeneration.Design version 8.0 8.0.0-preview.1.23117.2 – < 8.0.24 8.0.24
Microsoft Microsoft.VisualStudio.Web.CodeGeneration.Design version 9.0 9.0.0-preview.1.24112.3 – < 9.0.13 9.0.13
Microsoft Microsoft.VisualStudio.Web.CodeGenerators.Mvc NOT_YET_AVAILABLE – < 9.0.13 9.0.13
Microsoft Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 10.0 10.0.0-rc.1.25458.5 – < 10.0.3 10.0.3
Microsoft Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 11.0.0-preview.1.26156.3 11.0.0-preview.1.26156.3 – < publication publication
Microsoft Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 11.0.0-preview.1.26230.3 11.0.0-preview.1.26230.3 – < publication publication
Microsoft Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 8.0 8.0.0-preview.1.23117.2 – < 8.0.24 8.0.24
Microsoft Microsoft.VisualStudio.Web.CodeGenerators.Mvc version 9.0 9.0.0-preview.1.24112.3 – < 9.0.13 9.0.13

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS dotnet7 No fix yet —

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 dotnet10-runtime 10.0.15-r0 —
Alpine v3.24 dotnet8-runtime 8.0.34-r0 —
Alpine v3.24 dotnet9-runtime 9.0.23-r0 —
Alpine v3.23 dotnet8-runtime 8.0.34-r0 —
Alpine v3.23 dotnet9-runtime 9.0.23-r0 —
Alpine v3.22 dotnet8-runtime 8.0.34-r0 —
Alpine v3.22 dotnet9-runtime 9.0.23-r0 —

Advisories 3

References