Changes.Watch~ upgrade verdicts ~
Free digest
CriticalPHP2Shell: is your PHP patched?

critical vulnerability

Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability

Fix availableCritical · CVSS 9.1EPSS 0.83%

Published Oct 13, 2026 · updated Oct 19, 2026

What to do

  1. Upgrade to a fixed version: Microsoft.AspNetCore.App.Runtime.linux-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-arm64 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm 11.0.0-rc.2, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64 11.0.0-rc.2 (see table).
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-arm

NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm64

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-arm

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm64

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-x64

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-x64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-x64

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-x64

NuGetMicrosoft.AspNetCore.App.Runtime.osx-arm64

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.osx-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.osx-x64

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.osx-x64

NuGetMicrosoft.AspNetCore.App.Runtime.win-arm64

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.win-x64

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-x64

NuGetMicrosoft.AspNetCore.App.Runtime.win-x86

Vulnerable versions
>= 11.0.0-preview.1, <= 11.0.0-rc.1
Fixed in
11.0.0-rc.2

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-x86

NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-arm

NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm64

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-arm

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm64

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-x64

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-x64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-x64

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-x64

NuGetMicrosoft.AspNetCore.App.Runtime.osx-arm64

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.osx-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.osx-x64

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.osx-x64

NuGetMicrosoft.AspNetCore.App.Runtime.win-arm64

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.win-x64

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-x64

NuGetMicrosoft.AspNetCore.App.Runtime.win-x86

Vulnerable versions
>= 8.0.0, <= 8.0.31
Fixed in
8.0.32

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-x86

NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-arm

NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm64

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-arm

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm64

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-x64

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-x64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-x64

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-x64

NuGetMicrosoft.AspNetCore.App.Runtime.osx-arm64

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.osx-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.osx-x64

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.osx-x64

NuGetMicrosoft.AspNetCore.App.Runtime.win-arm64

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.win-x64

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-x64

NuGetMicrosoft.AspNetCore.App.Runtime.win-x86

Vulnerable versions
>= 10.0.0, <= 10.0.12
Fixed in
10.0.13

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.win-x86

NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm

Vulnerable versions
>= 9.0.0, <= 9.0.20
Fixed in
9.0.21

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-arm

NuGetMicrosoft.AspNetCore.App.Runtime.linux-arm64

Vulnerable versions
>= 9.0.0, <= 9.0.20
Fixed in
9.0.21

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm

Vulnerable versions
>= 9.0.0, <= 9.0.20
Fixed in
9.0.21

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-arm

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-arm64

Vulnerable versions
>= 9.0.0, <= 9.0.20
Fixed in
9.0.21

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-arm64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-musl-x64

Vulnerable versions
>= 9.0.0, <= 9.0.20
Fixed in
9.0.21

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-musl-x64

NuGetMicrosoft.AspNetCore.App.Runtime.linux-x64

Vulnerable versions
>= 9.0.0, <= 9.0.20
Fixed in
9.0.21

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.linux-x64

NuGetMicrosoft.AspNetCore.App.Runtime.osx-arm64

Vulnerable versions
>= 9.0.0, <= 9.0.20
Fixed in
9.0.21

Check your project: dotnet list package --include-transitive | grep -i Microsoft.AspNetCore.App.Runtime.osx-arm64

Sources

CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

← All critical vulnerabilities