Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-7326

Good to know:

icon

Date: July 8, 2025

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

Severity Score

Related Resources (7)

https://www.herodevs.com/vulnerability-directory/cve-2025-24070
https://www.herodevs.com/vulnerability-directory/cve-2025-7326?nes-for-.net
https://www.herodevs.com/vulnerability-directory/cve-2025-7326
https://www.cve.org/CVERecord?id=CVE-2025-24070
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24070
https://nvd.nist.gov/vuln/detail/CVE-2025-7326
https://www.mend.io/vulnerability-database/CVE-2025-7326

Severity Score

Weakness Type (CWE)

Weak Authentication

CWE-1390

Top Fix

icon

Upgrade Version

Upgrade to version Microsoft.AspNetCore.Identity - 2.3.1;Microsoft.AspNetCore.Identity - 2.3.1

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): HIGH

Do you need more information?

Contact Us