CVE-2025-7326CWE-1390

EOL ASP.NET Core Elevation of Privilege Vulnerability

High · published July 8, 2025

CVSS v3.1
7.0
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00711 · 53.0th percentile
Weakness
CWE-1390 · Weak Authentication
Published
2025-07-08T14:31Z
EPSS history
Timeline
  • 08 JUL 14:31Z
    EOL ASP.NET Core Elevation of Privilege Vulnerability
    cvelistv5