{"metadata": {"vulnerability": "CVE-2026-40372", "count": 113, "kinds": {"milestone": 10, "sighting": 73, "kev": 0, "other": 30}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0123", "record": "NCSC-2026-0123", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-11T23:06:15.615Z", "date_only": false, "value": "2026-04-11T23:06:15.615Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-40372", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-14T07:00:00Z", "date_only": false, "value": "2026-04-14T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40372", "record": "MSRC_CVE-2026-40372", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": true, "value": "2026-04-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0478", "record": "CERTFR-2026-AVI-0478", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-40372", "record": "UBUNTU-CVE-2026-40372", "field": "published"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40372", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40372", "record": "FKIE_CVE-2026-40372", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-21T07:00:00Z", "date_only": false, "value": "2026-04-21T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40372", "record": "MSRC_CVE-2026-40372", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-21T07:00:00Z", "date_only": false, "value": "2026-04-21T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40372", "record": "MSRC_CVE-2026-40372", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-04-21T14:00:00Z", "date_only": false, "value": "2026-04-21T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2026-40372", "field": "containers.cna.datePublic"}, {"timestamp": "2026-04-21T19:20:50.215Z", "date_only": false, "value": "2026-04-21T19:20:50.215Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40372", "field": "containers.adp.1.datePublic"}, {"timestamp": "2026-04-21T19:20:50.215Z", "date_only": false, "value": "2026-04-21T19:20:50.215Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-40372", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-04-21T19:20:50.215Z", "date_only": false, "value": "2026-04-21T19:20:50.215Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40372", "field": "containers.adp.1.timeline.1.time"}, {"timestamp": "2026-04-21T20:01:18.286Z", "date_only": false, "value": "2026-04-21T20:01:18.286Z", "kind": "other", "label": "Time", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40372", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-04-21T20:16:59Z", "date_only": false, "value": "2026-04-21T20:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9MV3-2CWR-P262", "record": "GHSA-9MV3-2CWR-P262", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-21T20:16:59.133Z", "date_only": false, "value": "2026-04-21T20:16:59.133", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40372", "record": "FKIE_CVE-2026-40372", "field": "published"}, {"timestamp": "2026-04-21T21:00:00Z", "date_only": false, "value": "2026-04-21T21:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1835", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "f71e9c82-3ffd-4c9f-961a-a82de75c4c42", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1835"}, {"timestamp": "2026-04-21T21:26:25Z", "date_only": false, "value": "2026-04-21T21:26:25.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zADwex3kLz9IaLHw__x_MwQfRAPY0yfg2SR1HrZ5uE72Qmc", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "4428226b-d6fc-449f-8167-46dc8ec1902d"}, {"timestamp": "2026-04-21T22:00:00Z", "date_only": false, "value": "2026-04-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1213", "record": "WID-SEC-W-2026-1213", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-21T22:00:00Z", "date_only": false, "value": "2026-04-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1213", "record": "WID-SEC-W-2026-1213", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-21T22:00:00Z", "date_only": false, "value": "2026-04-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1213", "record": "WID-SEC-W-2026-1213", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0478", "record": "CERTFR-2026-AVI-0478", "field": "last_revision_date"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0478", "record": "CERTFR-2026-AVI-0478", "field": "initial_release_date"}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0478", "record": "CERTFR-2026-AVI-0478", "field": "revisions.0.revision_date"}, {"timestamp": "2026-04-22T02:29:17.847Z", "date_only": false, "value": "2026-04-22T02:29:17.847196Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mk2ha7xm7v2g", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "006fc4e2-0298-4d73-a59e-46a3efbcb1b6", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mk2ha7xm7v2g"}, {"timestamp": "2026-04-22T02:58:03Z", "date_only": false, "value": "2026-04-22T02:58:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/04/22/microsoft-releases-emergency-net-update.html", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "4a021e3f-44a6-4bf8-8287-58558589166a", "url": "https://threatintel.cc/2026/04/22/microsoft-releases-emergency-net-update.html"}, {"timestamp": "2026-04-22T03:56:11.609Z", "date_only": false, "value": "2026-04-22T03:56:11.609Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-40372", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-22T04:57:54.836Z", "date_only": false, "value": "2026-04-22T04:57:54.836069Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116446584798450350", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "8c208a4b-d299-44ba-a970-edd61384d3e8", "url": "https://infosec.exchange/users/edwardk/statuses/116446584798450350"}, {"timestamp": "2026-04-22T04:58:27.123Z", "date_only": false, "value": "2026-04-22T04:58:27.123257Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mk2pks7cwk2o", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "3b448fa4-e2d7-42fa-a79f-356a83ac18ea", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mk2pks7cwk2o"}, {"timestamp": "2026-04-22T05:45:00Z", "date_only": false, "value": "2026-04-22T05:45:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/04/kritisk-sarbarhet-i-microsoft-aspnet-core-data-protection.html", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "25a8bfe5-4048-4b77-9be9-4ef6c15b5a2f", "url": "https://www.cert.se/2026/04/kritisk-sarbarhet-i-microsoft-aspnet-core-data-protection.html"}, {"timestamp": "2026-04-22T07:16:27Z", "date_only": false, "value": "2026-04-22T07:16:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-av26-377", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "f138ee8f-63c1-47ab-a673-42e4e3e5bf49", "url": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-av26-377"}, {"timestamp": "2026-04-22T07:29:00Z", "date_only": false, "value": "2026-04-22T07:29:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/04/microsoft-patches-critical-aspnet-core.html", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "df80618d-a62e-4637-a99a-bcb0d82a6845", "url": "https://thehackernews.com/2026/04/microsoft-patches-critical-aspnet-core.html"}, {"timestamp": "2026-04-22T07:57:13.175Z", "date_only": false, "value": "2026-04-22T07:57:13.175292Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/116447289853463376", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "2a983edf-54db-4d8f-8410-8dc8bd69217c", "url": "https://infosec.exchange/users/vuldb/statuses/116447289853463376"}, {"timestamp": "2026-04-22T08:34:11.391Z", "date_only": false, "value": "2026-04-22T08:34:11.391487Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/116447435217642826", "record": "cve-2026-40372", "field": "creation_timestamp", "uuid": "19438f94-06f9-49b7-98ca-989f2166b795", "url": "https://social.tchncs.de/users/gborn/statuses/116447435217642826"}, {"timestamp": "2026-04-22T09:40:27.334Z", "date_only": false, "value": "2026-04-22T09:40:27.334869Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0123", "record": "NCSC-2026-0123", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-22T09:40:27.334Z", "date_only": false, "value": "2026-04-22T09:40:27.334869Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0123", "record": "NCSC-2026-0123", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-04-22T09:40:27.334Z", "date_only": false, "value": "2026-04-22T09:40:27.334869Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0123", "record": "NCSC-2026-0123", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-22T09:49:53Z", "date_only": false, "value": "2026-04-22T09:49:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/8850", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "11b803e3-a47b-4ba6-bffb-afeff4602f01", "content": "\u26a0\ufe0f Microsoft patched CVE-2026-40372 (CVSS 9.1) in ASP .NET Core enabling SYSTEM-level escalation.\n\nA crypto flaw let attackers forge payloads and decrypt auth data in apps using vulnerable Data Protection on Linux/macOS.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/04/microsoft-patches-critical-aspnet-core.html", "url": "https://t.me/thehackernews/8850"}, {"timestamp": "2026-04-22T10:09:16Z", "date_only": false, "value": "2026-04-22T10:09:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/249157", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "9dd21d22-0329-420d-991a-ba5e15bacce1", "content": "Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug\nhttps://ift.tt/dhBSxiE", "url": "https://t.me/ctinow/249157"}, {"timestamp": "2026-04-22T10:15:50.874Z", "date_only": false, "value": "2026-04-22T10:15:50.874798Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mk3bchzmc22t", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "0b704b3e-ccca-4038-bd66-8426407331f2", "url": "https://bsky.app/profile/ninjaowl.ai/post/3mk3bchzmc22t"}, {"timestamp": "2026-04-22T10:24:17.348Z", "date_only": false, "value": "2026-04-22T10:24:17.348520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk3brles662e", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "f484005f-c453-48de-b6df-13ab4983fdc2", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk3brles662e"}, {"timestamp": "2026-04-22T10:24:46.722Z", "date_only": false, "value": "2026-04-22T10:24:46.722815Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mk3bsgwbj227", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "56c2801e-9ce3-4a2b-a2e2-1b2316288e44", "url": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mk3bsgwbj227"}, {"timestamp": "2026-04-22T11:00:27.849Z", "date_only": false, "value": "2026-04-22T11:00:27.849744Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk3dsawyke2o", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "90d7aedb-4a3f-4ffa-aefd-d73cb94b5cc9", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk3dsawyke2o"}, {"timestamp": "2026-04-22T11:01:18.147Z", "date_only": false, "value": "2026-04-22T11:01:18.147458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it4intserver.bsky.social/post/3mk3dtqojmw27", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "2311face-d139-490b-88ce-abc09a290b90", "url": "https://bsky.app/profile/it4intserver.bsky.social/post/3mk3dtqojmw27"}, {"timestamp": "2026-04-22T11:45:23.227Z", "date_only": false, "value": "2026-04-22T11:45:23.227039Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk3gclljla2y", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "00d918cf-0047-48cc-acc2-bbd619cb70ea", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mk3gclljla2y"}, {"timestamp": "2026-04-22T12:04:13Z", "date_only": false, "value": "2026-04-22T12:04:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/39789", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "cda1347c-518e-4057-93cd-18b375020a00", "content": "Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug \u2013 thehackernews.com\n\nWed, 22 Apr 2026 17:29:00", "url": "https://t.me/TengkorakCyberCrewzz/39789"}, {"timestamp": "2026-04-22T12:04:13Z", "date_only": false, "value": "2026-04-22T12:04:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/9884", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "014d4458-5eb1-49fa-bcdc-165a97194005", "content": "Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug \u2013 thehackernews.com\n\nWed, 22 Apr 2026 17:29:00", "url": "https://t.me/TengkorakCyberCrewzz/9884"}, {"timestamp": "2026-04-22T12:05:34.749Z", "date_only": false, "value": "2026-04-22T12:05:34.749400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mk3hgp3yxq2e", "record": "cve-2026-40372", "field": "creation_timestamp", "uuid": "36f9ba08-a227-4335-abaf-c2d02379b648", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mk3hgp3yxq2e"}, {"timestamp": "2026-04-22T12:33:34Z", "date_only": false, "value": "2026-04-22T12:33:34.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/o2ShZu8SWJsQz0lyfePXlgSzX17jDBHijFOkjyxphCNr2g", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "d75c4fee-1b91-4b3f-b666-93b13ac99be1"}, {"timestamp": "2026-04-22T12:45:16.768Z", "date_only": false, "value": "2026-04-22T12:45:16.768922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnp3kps2a", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "a8bf65d0-1025-4135-b1ab-380b5b400340", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnp3kps2a"}, {"timestamp": "2026-04-22T13:30:06Z", "date_only": false, "value": "2026-04-22T13:30:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8130", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "763ef814-e31d-4262-bd06-63b7ef4b7b23", "content": "Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 ASP.NET Core.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-40372 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 API \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 ASP.NET Core. \n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 cookie.\n\nMicrosoft \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0441\u0431\u043e\u044f\u0445 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0432 \u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f .NET 10.0.6, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u0432 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 NuGet Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0448\u0438\u0444\u0440\u0430\u0442\u043e\u0440 \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u0435\u0442 \u0441\u0432\u043e\u0439 \u0442\u0435\u0433 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 HMAC \u043f\u043e \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u0431\u0430\u0439\u0442\u0430\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043e\u0442\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0439 \u0445\u0435\u0448.\n\n\u0412 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 DataProtection, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 cookie \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0442\u043e\u043a\u0435\u043d\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438, TempData, \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 OIDC \u0438 \u0442.\u0434.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u041f\u041e \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430, \u043e\u043d \u043c\u043e\u0433 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b (\u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0441\u0441\u0438\u0438, \u043a\u043b\u044e\u0447 API, \u0441\u0441\u044b\u043b\u043a\u0430 \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0442. \u0434.).\n\n\u042d\u0442\u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 10.0.7, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0441\u043c\u0435\u043d\u0430 \u043d\u0430\u0431\u043e\u0440\u0430 \u043a\u043b\u044e\u0447\u0435\u0439 DataProtection.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430 Microsoft \u0432 \u0441\u0432\u043e\u0435\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043d\u043e \u043e\u043d\u0438 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u0432\u0441\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0447\u044c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 ASP.NET Core Data Protection, \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 Microsoft.AspNetCore.DataProtection \u0434\u043e 10.0.7, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u0435 \u043b\u044e\u0431\u044b\u0445 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445, \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0432 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438. \n\n\u0412 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u043d\u0430\u0431\u043e\u0440 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows Server \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u0430 \u0430\u043f\u0440\u0435\u043b\u044c 2026 \u0433\u043e\u0434\u0430. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0438\u0445 \u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 - \u0432\u043f\u043e\u043b\u043d\u0435 \u043e\u0431\u044b\u0447\u043d\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u043c\u0438\u043a\u0440\u043e\u043c\u044f\u0433\u043a\u0438\u0445.", "url": "https://t.me/true_secator/8130"}, {"timestamp": "2026-04-22T15:20:29.806Z", "date_only": false, "value": "2026-04-22T15:20:29.806375Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/technadu/statuses/116449032860351475", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "426296da-25e2-4859-99a2-271cfe187fd4", "url": "https://infosec.exchange/users/technadu/statuses/116449032860351475"}, {"timestamp": "2026-04-22T15:22:50.452Z", "date_only": false, "value": "2026-04-22T15:22:50.452717Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3mk3sh473ak2k", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "e35ab900-1fd5-4309-921c-ffe486cf6139", "url": "https://bsky.app/profile/technadu.com/post/3mk3sh473ak2k"}, {"timestamp": "2026-04-22T15:40:12.269Z", "date_only": false, "value": "2026-04-22T15:40:12.269007Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116449110375876459", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "f8f8bffa-dc47-4f2f-aaf3-7f6cd0d80987", "url": "https://infosec.exchange/users/AAKL/statuses/116449110375876459"}, {"timestamp": "2026-04-22T15:51:33.830Z", "date_only": false, "value": "2026-04-22T15:51:33.830837Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mk3u2sc4232u", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "dfa8d396-238a-4f52-90a9-0b43a9646940", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mk3u2sc4232u"}, {"timestamp": "2026-04-22T16:04:07.384Z", "date_only": false, "value": "2026-04-22T16:04:07.384997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk3uravnvg2f", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "1e098da0-770b-45e0-8711-84519f084c0c", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk3uravnvg2f"}, {"timestamp": "2026-04-22T16:37:04.352Z", "date_only": false, "value": "2026-04-22T16:37:04.352504Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rmcholewa.bsky.social/post/3mk3wm5ufoh2a", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "4ef28db3-d44f-4c04-9f6e-15d50bd5bd9b", "url": "https://bsky.app/profile/rmcholewa.bsky.social/post/3mk3wm5ufoh2a"}, {"timestamp": "2026-04-22T18:30:08.793Z", "date_only": false, "value": "2026-04-22T18:30:08.793775Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/duendesoftware.com/post/3mk44wdl3mt2m", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "74360108-e88a-4bea-b9d5-2e5a0c3f7118", "url": "https://bsky.app/profile/duendesoftware.com/post/3mk44wdl3mt2m"}, {"timestamp": "2026-04-22T19:04:23.345Z", "date_only": false, "value": "2026-04-22T19:04:23.345019Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mk46tliaoz2o", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "ab33e4f6-807b-4b46-9953-48cf54faef9b", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mk46tliaoz2o"}, {"timestamp": "2026-04-22T21:14:19.286Z", "date_only": false, "value": "2026-04-22T21:14:19.286548Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mk4g3vlxnk2q", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "e1c98243-d2e0-4dde-85ab-f81dd7692ca1", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mk4g3vlxnk2q"}, {"timestamp": "2026-04-23T02:29:31.329Z", "date_only": false, "value": "2026-04-23T02:29:31.329626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mk4xpkgxex2u", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "8f402dd8-6435-43e2-8d29-03028c954110", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mk4xpkgxex2u"}, {"timestamp": "2026-04-23T05:06:44.787Z", "date_only": false, "value": "2026-04-23T05:06:44.787043Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk5aioqdc22d", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "1427c80d-d4b7-4c24-833f-0f8fb145f298", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk5aioqdc22d"}, {"timestamp": "2026-04-23T10:16:22.879Z", "date_only": false, "value": "2026-04-23T10:16:22.879646Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mk5rsdywyn2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "b5f27dd8-603c-459d-8c3e-6acf291406e7", "url": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mk5rsdywyn2s"}, {"timestamp": "2026-04-23T13:09:00.824Z", "date_only": false, "value": "2026-04-23T13:09:00.824096Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk63h2kw5k2d", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "8752c20d-bd5f-4c45-83e3-5f2ab2a8f2d7", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mk63h2kw5k2d"}, {"timestamp": "2026-04-23T14:55:41Z", "date_only": false, "value": "2026-04-23T14:55:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9MV3-2CWR-P262", "record": "GHSA-9MV3-2CWR-P262", "field": "published"}, {"timestamp": "2026-04-23T15:06:10.723Z", "date_only": false, "value": "2026-04-23T15:06:10.723419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mk6bykdetu2y", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "29f083b3-ea28-4cce-87fe-8b909fb3f5c0", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mk6bykdetu2y"}, {"timestamp": "2026-04-23T15:33:03.965Z", "date_only": false, "value": "2026-04-23T15:33:03.965217Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mk6dilom7h26", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "036626eb-b178-4b40-ad45-458fc9ae14c7", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3mk6dilom7h26"}, {"timestamp": "2026-04-23T16:13:40Z", "date_only": false, "value": "2026-04-23T16:13:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/89122", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "2db9b917-5a6e-41b4-935f-2d9d0d9e8b28", "content": "\ud83d\udd8b\ufe0f Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug \ud83d\udd8b\ufe0f\n\nMicrosoft has released outofband updates to address a security vulnerability in ASP.NET Core that could allow an attacker to escalate privileges. The vulnerability, tracked as CVE202640372, carries a CVSS score of 9.1 out of 10.0. It's rated Important in severity. An anonymous researcher has been credited with discovering and reporting the flaw. \"Improper verification of cryptographic.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/89122"}, {"timestamp": "2026-04-23T20:34:44.882Z", "date_only": false, "value": "2026-04-23T20:34:44.882759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intel.overresearched.net/post/3mk6ue2g2lc2q", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "efcd552f-844d-47ae-a993-5fa7e3fe17a0", "url": "https://bsky.app/profile/intel.overresearched.net/post/3mk6ue2g2lc2q"}, {"timestamp": "2026-04-24T02:29:27.316Z", "date_only": false, "value": "2026-04-24T02:29:27.316703Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mk7i6drwho2g", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "2c5d8bbb-2ee3-4094-8b84-a5d60be4ab59", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mk7i6drwho2g"}, {"timestamp": "2026-04-24T03:17:27.739Z", "date_only": false, "value": "2026-04-24T03:17:27.739339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mk7ku6rokq2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "1f07ff95-a6de-4c91-aac2-0a84a8dd19fa", "url": "https://bsky.app/profile/opsmatters.com/post/3mk7ku6rokq2s"}, {"timestamp": "2026-04-24T06:30:00Z", "date_only": false, "value": "2026-04-24T06:30:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/04/cert-se-veckobrev-v17.html", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "12c59191-d1c9-4cbd-a03a-44e289c3c513", "url": "https://www.cert.se/2026/04/cert-se-veckobrev-v17.html"}, {"timestamp": "2026-04-24T07:58:57.165Z", "date_only": false, "value": "2026-04-24T07:58:57.165464Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mka2ljmshn2b", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "1abcaee1-1b71-4647-95c9-ea9db71f145d", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mka2ljmshn2b"}, {"timestamp": "2026-04-24T15:22:01.668Z", "date_only": false, "value": "2026-04-24T15:22:01.668149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpi6s2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "1073f4d0-1afd-4b5b-ad20-a204acd2b4fe", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpi6s2s"}, {"timestamp": "2026-04-24T15:22:02.208Z", "date_only": false, "value": "2026-04-24T15:22:02.208114Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpswk2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "08e64893-33bb-411f-86a5-f111c52c65cc", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpswk2s"}, {"timestamp": "2026-04-24T15:22:02.736Z", "date_only": false, "value": "2026-04-24T15:22:02.736757Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqptvs2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "5712bb98-159a-463b-8765-af6b7dee0fff", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqptvs2s"}, {"timestamp": "2026-04-24T15:22:03.240Z", "date_only": false, "value": "2026-04-24T15:22:03.240339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpuv22s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "f0a84c33-b9fb-4143-9c94-563fd025b247", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpuv22s"}, {"timestamp": "2026-04-24T15:22:03.752Z", "date_only": false, "value": "2026-04-24T15:22:03.752253Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpvuc2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "2b606e1a-9498-419f-a030-08126a7fc328", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpvuc2s"}, {"timestamp": "2026-04-24T15:22:04.401Z", "date_only": false, "value": "2026-04-24T15:22:04.401606Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpwtk2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "de8a8e53-4d6c-424d-b42d-5c7a510a97af", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpwtk2s"}, {"timestamp": "2026-04-24T15:22:04.916Z", "date_only": false, "value": "2026-04-24T15:22:04.916083Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpxss2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "90a89fca-d315-4a70-a2d2-4ced1b15d9a3", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpxss2s"}, {"timestamp": "2026-04-24T15:22:05.441Z", "date_only": false, "value": "2026-04-24T15:22:05.441360Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpxst2s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "365f4c42-9657-4531-aa0f-dd726ee2fc35", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpxst2s"}, {"timestamp": "2026-04-24T15:22:05.956Z", "date_only": false, "value": "2026-04-24T15:22:05.956746Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpys32s", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "fa69c136-3913-425f-a839-699f04fc8b33", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mkatdqpys32s"}, {"timestamp": "2026-04-24T19:59:43Z", "date_only": false, "value": "2026-04-24T19:59:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9MV3-2CWR-P262", "record": "GHSA-9MV3-2CWR-P262", "field": "modified"}, {"timestamp": "2026-04-25T02:29:06.535Z", "date_only": false, "value": "2026-04-25T02:29:06.535689Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkbymlltlg2v", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "f90c9a57-6c8e-486f-83d2-38c63280a812", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mkbymlltlg2v"}, {"timestamp": "2026-04-26T02:29:41.092Z", "date_only": false, "value": "2026-04-26T02:29:41.092443Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkej4m65mr2x", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "c2f81cac-bfa2-45da-9fba-2f733655035d", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mkej4m65mr2x"}, {"timestamp": "2026-04-27T02:29:40.745Z", "date_only": false, "value": "2026-04-27T02:29:40.745445Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mkgzljmjvd2z", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "08b28635-2812-49e8-ac8d-933d20d8e720", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mkgzljmjvd2z"}, {"timestamp": "2026-04-27T21:37:07.530Z", "date_only": false, "value": "2026-04-27T21:37:07.530489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkizpcpdbj2o", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "62bc7fde-16f0-4b17-9e7b-814f46ea70bb", "url": "https://bsky.app/profile/cyberhub.blog/post/3mkizpcpdbj2o"}, {"timestamp": "2026-04-28T05:41:09.064Z", "date_only": false, "value": "2026-04-28T05:41:09.064227Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/adulau/statuses/116480728642687161", "record": "cve-2026-40372", "field": "creation_timestamp", "uuid": "9ef41b45-92fa-4efa-8427-2e80f1cf3547", "url": "https://infosec.exchange/users/adulau/statuses/116480728642687161"}, {"timestamp": "2026-04-28T05:41:17.575Z", "date_only": false, "value": "2026-04-28T05:41:17.575200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3mkjuqzyb32o2", "record": "cve-2026-40372", "field": "creation_timestamp", "uuid": "421f948d-8580-4705-8c0f-9d00ffff1980", "url": "https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3mkjuqzyb32o2"}, {"timestamp": "2026-04-28T07:00:00Z", "date_only": false, "value": "2026-04-28T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40372", "record": "MSRC_CVE-2026-40372", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-04-28T07:00:00Z", "date_only": false, "value": "2026-04-28T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40372", "record": "MSRC_CVE-2026-40372", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-28T17:39:54.666Z", "date_only": false, "value": "2026-04-28T17:39:54.666Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-40372", "record": "MSRC_CVE-2026-40372", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-28T22:00:00Z", "date_only": false, "value": "2026-04-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1213", "record": "WID-SEC-W-2026-1213", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-04-30T03:15:00Z", "date_only": false, "value": "2026-04-30T03:15:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/04/cert-se-veckobrev-v18.html", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "e1998127-df66-4544-b502-19624dc13e5a", "url": "https://www.cert.se/2026/04/cert-se-veckobrev-v18.html"}, {"timestamp": "2026-04-30T03:59:34.447Z", "date_only": false, "value": "2026-04-30T03:59:34.447433Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mkopyzl7lb2i", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "993f0442-a7e7-4f06-835c-8aaf1a5e2aac", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-3854) #GitHub Enterprise Server RCE via Git Push Injection\" and \"Emerging Threat: (CVE-2026-40372) ASP.NET Core Privilege Escalation via Signature Bypass\".\n \n#cybersecurity #AttackSurfaceManagement https://opsmtrs.com/44Srq0X", "url": "https://bsky.app/profile/opsmatters.com/post/3mkopyzl7lb2i"}, {"timestamp": "2026-04-30T09:42:19.397Z", "date_only": false, "value": "2026-04-30T09:42:19.397297Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/the-runtime.bsky.social/post/3mkpd5w3sxo2g", "record": "cve-2026-40372", "field": "creation_timestamp", "uuid": "10a00ba2-4c0c-4ca0-a040-59c4e8023039", "content": "CVE-2026-40372 silently broke HMAC in ASP.NET Core Data Protection. The real problem? Patching isn't enough - forged cookies can mint legit tokens that survive key rotation.\n\nhttps://the-runtime.dev/articles/cve-2026-40372-aspnet-core-data-protection-emergency-patch/\n\n#dotnet #security #aspnetcore", "url": "https://bsky.app/profile/the-runtime.bsky.social/post/3mkpd5w3sxo2g"}, {"timestamp": "2026-05-01T13:23:11.921Z", "date_only": false, "value": "2026-05-01T13:23:11.921580Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dotnetfoundation.org/post/3mks7xnjzdc2v", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "90d673cf-ce63-44f1-b64d-cf65b4460653", "content": "\ud83d\udce3.NET 10.0.7 Out-of-Band Security Update - .NET Blog\nMicrosoft released .NET 10.0.7 as an out-of-band security update to address CVE-2026-40372.\n\nhubs.li/Q04dbWjB0 #dotnet", "url": "https://bsky.app/profile/dotnetfoundation.org/post/3mks7xnjzdc2v"}, {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1213", "record": "WID-SEC-W-2026-1213", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-05-03T22:00:00Z", "date_only": false, "value": "2026-05-03T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1213", "record": "WID-SEC-W-2026-1213", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-04T09:36:07.650Z", "date_only": false, "value": "2026-05-04T09:36:07.650+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1213", "record": "WID-SEC-W-2026-1213", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-29T11:32:10Z", "date_only": false, "value": "2026-06-29T11:32:10Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-40372", "record": "UBUNTU-CVE-2026-40372", "field": "modified"}, {"timestamp": "2026-07-15T02:21:05.553Z", "date_only": false, "value": "2026-07-15T02:21:05.553", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-40372", "record": "FKIE_CVE-2026-40372", "field": "lastModified"}, {"timestamp": "2026-07-15T02:45:28.657Z", "date_only": false, "value": "2026-07-15T02:45:28.657Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat-SADP", "record": "CVE-2026-40372", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-19T16:00:05.698Z", "date_only": false, "value": "2026-07-19T16:00:05.698954Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/21054", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "49e5a170-c429-4dc4-9143-a8365b5894dc", "content": "Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug \u2013 thehackernews.com\n\nWed, 22 Apr 2026 17:29:00", "url": "https://t.me/MalaysiaHacktivistz/21054"}, {"timestamp": "2026-07-25T15:00:07.740Z", "date_only": false, "value": "2026-07-25T15:00:07.740562Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/667", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "9239810d-994d-4556-a1bf-266cf17ca7f3", "content": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 .NET \u0441\u043b\u043e\u043c\u0430\u043b\u043e \u0437\u0430\u0449\u0438\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 ASP.NET Core\n\nMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-40372 (\u043e\u0446\u0435\u043d\u043a\u0430 \u043f\u043e CVSS 9.1) \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 ASP.NET Core. \u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b Data Protection \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0443 cookie \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u044f\u043b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u043f\u043e \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0430 \u0438\u043d\u043e\u0433\u0434\u0430 \u0438 \u0432\u043e\u0432\u0441\u0435 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 (cookie, \u0442\u043e\u043a\u0435\u043d\u044b \u0444\u043e\u0440\u043c, \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nMicrosoft \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 10.0.7 \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0437\u0430\u0449\u0438\u0442\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0442\u043e\u043a\u0435\u043d\u044b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0447\u0438\u043c\u0438 \u0434\u043e \u0438\u0445 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u043e\u0442\u0430\u0446\u0438\u0438.\n\n#microsoft #aspnetcore #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/667"}, {"timestamp": "2026-08-18T11:32:26.151Z", "date_only": false, "value": "2026-08-18T11:32:26.151237Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/francejeunes.bsky.social/post/3mte4m2fr642x", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "d6cf85b9-22e7-4320-8038-619d6153e1e3", "content": "ASP.NET Core sur macOS et Linux : une faille critique exige une mise \u00e0 jour imm\u00e9diate\n\n\u2753 Qu'est-ce que la faille CVE-2026-40372 dans ASP.NET Core ?\n\u2753 Quelles applications sont vuln\u00e9rables \u00e0 CVE-2026-40372 ?\n\u2753 Pourquoi cette faille n'affecte-t-elle pas Windows ?\n\n#linux #macos #microsoft", "url": "https://bsky.app/profile/francejeunes.bsky.social/post/3mte4m2fr642x"}, {"timestamp": "2026-08-29T20:00:17.190Z", "date_only": false, "value": "2026-08-29T20:00:17.190721Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1364", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "aaae9873-0d14-4304-8ad7-274525b79cdf", "content": "Microsoft patched CVE-2026-40372 (CVSS 9.1) in ASP .NET Core enabling SYSTEM-level escalation.\n\nA crypto flaw let attackers forge payloads and decrypt auth data in apps using vulnerable Data Protection on Linux/macOS.", "url": "https://t.me/CyberDispatch/1364"}, {"timestamp": "2026-09-02T06:00:10.077Z", "date_only": false, "value": "2026-09-02T06:00:10.077387Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/45751", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "e321cd5f-9e9a-4c7d-b044-1b97e2c39c03", "content": "https://unaaldia.hispasec.com/2026/04/microsoft-corrige-de-urgencia-un-fallo-critico-en-asp-net-core-data-protection-cve-2026-40372.html?utm_source=rss&utm_medium=rss&utm_campaign=microsoft-corrige-de-urgencia-un-fallo-critico-en-asp-net-core-data-protection-cve-2026-40372", "url": "https://t.me/HackingTeamGrupoOfficial/45751"}, {"timestamp": "2026-09-02T06:00:14.234Z", "date_only": false, "value": "2026-09-02T06:00:14.234234Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingTeamGrupoOfficial/45568", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "f7e00ea3-d60d-4a90-b407-b002e5f8c082", "content": "https://unaaldia.hispasec.com/2026/04/microsoft-corrige-de-urgencia-un-fallo-critico-en-asp-net-core-data-protection-cve-2026-40372.html?utm_source=rss&utm_medium=rss&utm_campaign=microsoft-corrige-de-urgencia-un-fallo-critico-en-asp-net-core-data-protection-cve-2026-40372", "url": "https://t.me/HackingTeamGrupoOfficial/45568"}, {"timestamp": "2026-09-03T00:00:48.072Z", "date_only": false, "value": "2026-09-03T00:00:48.072760Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/45568", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "a01db131-674a-47e1-bb3b-3a73f428c693", "content": "https://unaaldia.hispasec.com/2026/04/microsoft-corrige-de-urgencia-un-fallo-critico-en-asp-net-core-data-protection-cve-2026-40372.html?utm_source=rss&utm_medium=rss&utm_campaign=microsoft-corrige-de-urgencia-un-fallo-critico-en-asp-net-core-data-protection-cve-2026-40372", "url": "https://t.me/HackingTeamGrupoOfficial/45568"}, {"timestamp": "2026-09-03T00:00:48.819Z", "date_only": false, "value": "2026-09-03T00:00:48.819881Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingTeamGrupoOfficial/45751", "record": "CVE-2026-40372", "field": "creation_timestamp", "uuid": "6549ce58-525a-439b-9e5b-0f090876e8be", "content": "https://unaaldia.hispasec.com/2026/04/microsoft-corrige-de-urgencia-un-fallo-critico-en-asp-net-core-data-protection-cve-2026-40372.html?utm_source=rss&utm_medium=rss&utm_campaign=microsoft-corrige-de-urgencia-un-fallo-critico-en-asp-net-core-data-protection-cve-2026-40372", "url": "https://t.me/HackingTeamGrupoOfficial/45751"}, {"timestamp": "2026-10-15T15:53:48.048Z", "date_only": false, "value": "2026-10-15T15:53:48.048Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-40372", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:53:48.048Z", "date_only": false, "value": "2026-10-15T15:53:48.048Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2026-40372", "field": "containers.cna.providerMetadata.dateUpdated"}]}