CVE-2026-70188

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

This vulnerability is rated as Critical severity for Red Hat products because an unauthenticated remote attacker can exploit HTTP/2 header parsing flaws over network connections without privileges or user interaction, potentially leading to security control bypasses and HTTP request smuggling. ASP.NET Core applications running on Red Hat Enterprise Linux that use Kestrel as a public-facing web server handling HTTP/2 connections are directly exposed. Services utilizing HTTP/1.1 exclusively or processing pre-validated traffic are not exposed to the specific HTTP/2 HPACK parsing flaws.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.