Weak Authentication in End-of-Life ASP.NET Core by Microsoft
CVE-2025-7326
7HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 8 July 2025
What is CVE-2025-7326?
The vulnerability in End Of Life ASP.NET Core arises from weak authentication mechanisms, which can be exploited by unauthorized attackers. This could enable them to gain elevated privileges over a network. Since the affected software components have reached their end-of-life, no future updates or support will be provided by the vendor, Microsoft, which heightens the risk for organizations still using these versions. It is crucial for users to migrate to supported versions to protect against potential exploits.
Affected Version(s)
ASP.NET Core 6.0 Unknown >=6.0.0 <= 6.0.36
Microsoft.AspNetCore.App.Runtime.linux-arm Linux >=6.0.0 <= 6.0.36
Microsoft.AspNetCore.App.Runtime.linux-arm64 Linux >=6.0.0 <= 6.0.36