CVE-2026-70181

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

This vulnerability is rated as Important because an unauthenticated remote attacker can cause severe denial of service by exhausting server memory without requiring special privileges or user interaction. In Red Hat Enterprise Linux and container environments, web applications using affected .NET runtimes to process multipart form requests are exposed over the network. The resulting exhaustion disrupts service availability, although confidentiality and data integrity remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.