<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 10 Oct 2026 19:38:44 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-24070 — ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2025-24070</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft ASP.NET Core 8.0, Microsoft ASP.NET Core 9.0, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.13, Microsoft Visual Studio 2022 version 17.8&lt;/p&gt;
&lt;p&gt;Weak authentication in ASP.NET Core &amp;amp;amp; Visual Studio allows an unauthorized attacker to elevate privileges over a network.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Microsoft ASP.NET Core 8.0, Microsoft ASP.NET Core 9.0, Microsoft Visual Studio 2022 version 17.10, Microsoft Visual Studio 2022 version 17.12, Microsoft Visual Studio 2022 version 17.13, Microsoft Visual Studio 2022 version 17.8&lt;/p&gt;
&lt;p&gt;Weak authentication in ASP.NET Core &amp;amp;amp; Visual Studio allows an unauthorized attacker to elevate privileges over a network.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2025-24070</guid>
    </item>
    <item>
      <title>USN-7345-1 — dotnet8, dotnet9 vulnerability</title>
      <link>https://vulnerability.circl.lu/vuln/usn-7345-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8&lt;/p&gt;
&lt;p&gt;Zahid TOKAT discovered that .NET suffered from a weak authentication
vulnerability. An attacker could possibly use this issue to elevate
privileges.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:22.04:LTS: dotnet8, Ubuntu:24.04:LTS: dotnet8&lt;/p&gt;
&lt;p&gt;Zahid TOKAT discovered that .NET suffered from a weak authentication
vulnerability. An attacker could possibly use this issue to elevate
privileges.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-7345-1</guid>
    </item>
  </channel>
</rss>
