CVE-2026-42899

Public on 2026-05-12
Modified on 2026-05-26
Description
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.
Severity
Important severity
Important
See what this means
CVSS v3 Base Score
7.5
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2023 dotnet10.0 2026-06-08 ALAS2023-2026-1803 Fixed
Amazon Linux 2023 dotnet6.0 Not Affected
Amazon Linux 2023 dotnet8.0 2026-06-08 ALAS2023-2026-1804 Fixed
Amazon Linux 2023 dotnet9.0 2026-06-08 ALAS2023-2026-1802 Fixed

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H