{"vulnerability": "CVE-2026-70179", "sightings": [{"uuid": "e7b875b0-e620-47c8-8b7f-715a21aceadc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5tnth22m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:07:55.605099Z"}, {"uuid": "e4f80ea9-2870-474f-afb7-38ab5bb4626b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjs2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:13.124092Z"}, {"uuid": "9c1f4202-32ff-4215-bab4-6b29712cef23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3ijs2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:07:50.005063Z"}, {"uuid": "566d45af-8da6-4382-9fb9-4ceda97c1bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3mgs2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:07:52.902252Z"}, {"uuid": "714f3efa-b414-4f90-b09b-a3adc87fb2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5u4uvc2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:07:58.252035Z"}, {"uuid": "b379a5ac-a420-4f49-a02b-830f02e7cb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5upqfs2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:03.827657Z"}, {"uuid": "78a13423-ed4a-4604-8ac9-1982c0ca58f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbrkk2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:09.849468Z"}, {"uuid": "2b0860e0-3f78-453f-96d7-6d972951f953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjw2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:23.861308Z"}, {"uuid": "e01f79fc-dbad-4b78-a078-98c1e3ebda7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uh32s2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:00.868982Z"}, {"uuid": "beb98740-08bd-4f78-8f77-f55339f86ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uwryk2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:07.196665Z"}, {"uuid": "eccaa17b-8ce8-4386-bf83-cf6e762094db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjt2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:15.820617Z"}, {"uuid": "448ae937-412f-48ed-b495-fe9904aae1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsju2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:18.470937Z"}, {"uuid": "712a09f1-ceb8-40b2-a13c-1a2aae2d21da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjv2m", "content": "CVE-2026-70179 | ASP.NET Core Elevation of Privilege\n\nI regret adding the whole \"Windows Authentication, but for Linux\" to asp.net core. As last month, this affects you if you're using LDAP lookups to drive integrated auth.\n\nAnd like last month my advice is stop doing that. Move to OAuth. Moderize!", "creation_timestamp": "2026-10-13T19:08:21.236819Z"}, {"uuid": "de5acee6-df44-44c7-a7b2-40f4843d7849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "content": "", "creation_timestamp": "2026-10-13T11:56:15.000000Z"}, {"uuid": "04449244-4727-4b55-ab27-e4b109df0ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117436304046802155", "content": "CVE-2026-70179 ASP.NET Core Elevation of Privilege Vulnerability Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-70179https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70179#Microsoft #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10 #Microsoft.AspNetCore.Authentication.Negotiate#CVE_2026_70179#bot", "creation_timestamp": "2026-10-13T23:56:32.367455Z"}, {"uuid": "89263c71-1f44-4c96-bdc2-371bf629246f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70179", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "content": "", "creation_timestamp": "2026-10-14T01:49:33.000000Z"}]}