Vulnerability DatabaseCVE-2026-109481
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-109481
Published:November 10, 2026
Updated:November 12, 2026
Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
Affected Packages
Microsoft.AspNetCore.Http.Connections (DOT_NET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
https://github.com/dotnet/dotnet.git (GITHUB):
Affected version(s) >=v11.0.0-preview.6.26359.118 <v11.0.0 || >=v11.0.0-rc.1.26425.128 <v11.0.0
Fix Suggestion:
Update to version v11.0.0
microsoft.aspnetcore.app.runtime.linux-arm (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.linux-arm64 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.linux-musl-arm (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.linux-musl-arm64 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.linux-musl-x64 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.linux-x64 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.osx-arm64 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.osx-x64 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.win-arm64 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.win-x64 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
microsoft.aspnetcore.app.runtime.win-x86 (NUGET):
Affected version(s) >=11.0.0-rc.1.26425.128 <11.0.0 || >=11.0.0-preview.6.26359.118 <11.0.0
Fix Suggestion:
Update to version 11.0.0
Related Resources (8)
Do you need more information?
Contact Us
CVSS v4
Base Score:
7.7
CVSS v3
Base Score:
7.5
Weakness Type (CWE)
Cross-Site Request Forgery
CWE-352