[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-47300":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":26,"downstream":27,"duplicates":34,"related":35,"reserved_at":9,"published_at":36,"modified_at":37,"state":38,"summary":39,"references_raw":46,"kevs":77,"epss":9,"epss_history":78,"metrics":79,"affected":88},"CVE-2026-47300","Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-303","Incorrect Implementation of Authentication Algorithm","The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-90","Reflection Attack in Authentication Protocol",[],[],[25],"GHSA-8prm-248r-h957",[],[28,30,32],{"_key":29},"RHSA-2026:26638",{"_key":31},"RHSA-2026:39952",{"_key":33},"UBUNTU-CVE-2026-47300",[],[],"2026-07-14T18:20:12.225Z","2026-07-22T20:29:12.592Z","PUBLISHED",{"cisa_kev":40,"cisa_ransomware":40,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":41,"severity_score":42,"severity_version":43,"severity_source":44,"severity_vector":45,"severity_status":38},false,"high",8.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",[47,55,59,64,68,73],{"url":48,"sources":49,"tags":51},"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47300",[44,50],"osv_nuget",[52,53,54],"Vendor Advisory","Patch","WEB",{"url":56,"sources":57,"tags":58},"https://github.com/dotnet/aspnetcore/security/advisories/GHSA-8prm-248r-h957",[50],[54],{"url":60,"sources":61,"tags":62},"https://nvd.nist.gov/vuln/detail/CVE-2026-47300",[50],[63],"Advisory",{"url":65,"sources":66,"tags":67},"https://github.com/dotnet/announcements/issues/409",[50],[54],{"url":69,"sources":70,"tags":71},"https://github.com/dotnet/aspnetcore",[50],[72],"PACKAGE",{"url":74,"sources":75,"tags":76},"https://github.com/dotnet/aspnetcore/discussions/67785",[50],[54],[],[],[80,85],{"source":44,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":81,"cvss_v4_0":9},{"baseScore":42,"baseSeverity":82,"vectorString":45,"impactScore":83,"exploitabilityScore":84},"HIGH",9.8,7.2,{"source":50,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":86,"cvss_v4_0":9},{"baseScore":42,"baseSeverity":9,"vectorString":87,"impactScore":83,"exploitabilityScore":84},"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[89,102,110,118,129,137,145],{"ecosystem":9,"name":90,"vendor":91,"product":92,"cpe_part":93,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":94},"Microsoft Visual Studio 2022 version 17.12","microsoft","microsoft visual studio 2022 version 17.12","a",[95],{"version":96,"is_range":97,"range_type":44,"version_start":98,"version_start_type":99,"version_end":100,"version_end_type":101,"fixed_in":9},">= 17.12.0, \u003C 17.12.22",true,"17.12.0","including","17.12.22","excluding",{"ecosystem":9,"name":103,"vendor":91,"product":104,"cpe_part":93,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":105},"Microsoft Visual Studio 2022 version 17.14","microsoft visual studio 2022 version 17.14",[106],{"version":107,"is_range":97,"range_type":44,"version_start":108,"version_start_type":99,"version_end":109,"version_end_type":101,"fixed_in":9},">= 17.14.0, \u003C 17.14.36","17.14.0","17.14.36",{"ecosystem":9,"name":111,"vendor":91,"product":112,"cpe_part":93,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":113},"Microsoft Visual Studio 2026 version 18.7","microsoft visual studio 2026 version 18.7",[114],{"version":115,"is_range":97,"range_type":44,"version_start":116,"version_start_type":99,"version_end":117,"version_end_type":101,"fixed_in":9},">= 18.0, \u003C 18.7.4","18.0","18.7.4",{"ecosystem":9,"name":119,"vendor":91,"product":120,"cpe_part":93,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":121},".NET 10.0",".net 10.0",[122,126],{"version":123,"is_range":97,"range_type":44,"version_start":124,"version_start_type":99,"version_end":125,"version_end_type":101,"fixed_in":9},">= 10.0.0, \u003C 10.0.6","10.0.0","10.0.6",{"version":127,"is_range":97,"range_type":44,"version_start":124,"version_start_type":99,"version_end":128,"version_end_type":101,"fixed_in":9},">= 10.0.0, \u003C 10.0.10","10.0.10",{"ecosystem":9,"name":130,"vendor":91,"product":131,"cpe_part":93,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":132},".NET 8.0",".net 8.0",[133],{"version":134,"is_range":97,"range_type":44,"version_start":135,"version_start_type":99,"version_end":136,"version_end_type":101,"fixed_in":9},">= 8.0.0, \u003C 8.0.29","8.0.0","8.0.29",{"ecosystem":9,"name":138,"vendor":91,"product":139,"cpe_part":93,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":140},".NET 9.0",".net 9.0",[141],{"version":142,"is_range":97,"range_type":44,"version_start":143,"version_start_type":99,"version_end":144,"version_end_type":101,"fixed_in":9},">= 9.0.0, \u003C 9.0.18","9.0.0","9.0.18",{"ecosystem":146,"name":147,"vendor":146,"product":147,"cpe_part":9,"purl_type":148,"purl_namespace":9,"purl_name":147,"source":9,"versions":149},"NuGet","Microsoft.AspNetCore.Authentication.Negotiate","nuget",[150,153,155],{"version":151,"is_range":97,"range_type":152,"version_start":124,"version_start_type":99,"version_end":128,"version_end_type":101,"fixed_in":9},"gte10_0_0_lt10_0_10","ecosystem",{"version":154,"is_range":97,"range_type":152,"version_start":143,"version_start_type":99,"version_end":144,"version_end_type":101,"fixed_in":9},"gte9_0_0_lt9_0_18",{"version":156,"is_range":97,"range_type":152,"version_start":135,"version_start_type":99,"version_end":136,"version_end_type":101,"fixed_in":9},"gte8_0_0_lt8_0_29"]