CVE-2026-70179

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

This vulnerability is rated as Important because an authenticated remote attacker could impersonate a different user account, potentially gaining elevated privileges and compromising application data integrity. In Red Hat environments, exposure is limited to ASP.NET Core workloads explicitly configured to utilize Negotiate authentication paired with LDAP directory lookups. Applications that rely on alternative authentication providers or operate Negotiate authentication without secondary directory resolution are not vulnerable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.