CYBERHAWK / CVE / CVE-2026-40372
CVE-2026-40372
ASP.NET Core
CRITICAL
CVSS 9.1
vibe
The flaw
Improper cryptographic signature verification enables privilege escalation
What to do
Apply Microsoft security updates
References
In the news
- Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation BugThe Hacker News · 2026-04-22
- CVE-2026-40372: ASP.NET Core Privilege EscalationSOC Prime · 2026-04-23
- Microsoft releases emergency patches for critical ASP.NET flawBleepingComputer · 2026-04-22