[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-47303":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T16:22:42.503Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":420,"aliases":421,"duplicate_of":9,"upstream":423,"downstream":424,"duplicates":431,"related":432,"reserved_at":9,"published_at":433,"modified_at":434,"state":435,"summary":436,"references_raw":443,"kevs":474,"epss":9,"epss_history":475,"metrics":476,"affected":485},"CVE-2026-47303","Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.",null,[11,403,410],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-302","Authentication Bypass by Assumed-Immutable Data","The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.","weakness","Incomplete","Base",[19,23,207,361,365,391,395,399],{"id":20,"name":21,"techniques":22},"CAPEC-10","Buffer Overflow via Environment Variables",[],{"id":24,"name":25,"techniques":26},"CAPEC-13","Subverting Environment Variable Values",[27,125,167],{"id":28,"name":29,"tactics":30,"countermeasures":37},"T1562.003","Impair Command History Logging",[31,34],{"id":32,"name":33},"TA0030","Defense Evasion",{"id":35,"name":36},"TA0005","Stealth",[38,43,48,52,56,60,65,69,74,79,83,87,92,96,101,105,109,113,117,121],{"id":39,"name":40,"tactic":41},"D3-CI","Configuration Inventory",{"name":42},"Model",{"id":44,"name":45,"tactic":46},"D3-FA","File Analysis",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-FIM","File Integrity Monitoring",{"name":47},{"id":53,"name":54,"tactic":55},"D3-DA","Dynamic Analysis",{"name":47},{"id":57,"name":58,"tactic":59},"D3-EFA","Emulated File Analysis",{"name":47},{"id":61,"name":62,"tactic":63},"D3-FEV","File Eviction",{"name":64},"Evict",{"id":66,"name":67,"tactic":68},"D3-RKD","Registry Key Deletion",{"name":64},{"id":70,"name":71,"tactic":72},"D3-DF","Decoy File",{"name":73},"Deceive",{"id":75,"name":76,"tactic":77},"D3-DRA","Disable Remote Access",{"name":78},"Harden",{"id":80,"name":81,"tactic":82},"D3-ACH","Application Configuration Hardening",{"name":78},{"id":84,"name":85,"tactic":86},"D3-FE","File Encryption",{"name":78},{"id":88,"name":89,"tactic":90},"D3-RC","Restore Configuration",{"name":91},"Restore",{"id":93,"name":94,"tactic":95},"D3-RF","Restore File",{"name":91},{"id":97,"name":98,"tactic":99},"D3-CQ","Content Quarantine",{"name":100},"Isolate",{"id":102,"name":103,"tactic":104},"D3-CF","Content Filtering",{"name":100},{"id":106,"name":107,"tactic":108},"D3-LFP","Local File Permissions",{"name":100},{"id":110,"name":111,"tactic":112},"D3-RFAM","Remote File Access Mediation",{"name":100},{"id":114,"name":115,"tactic":116},"D3-CM","Content Modification",{"name":100},{"id":118,"name":119,"tactic":120},"D3-EAL","Executable Allowlisting",{"name":100},{"id":122,"name":123,"tactic":124},"D3-EDL","Executable Denylisting",{"name":100},{"id":126,"name":127,"tactics":128,"countermeasures":140},"T1574.006","Dynamic Linker Hijacking",[129,132,135,136,137],{"id":130,"name":131},"TA0110","Persistence",{"id":133,"name":134},"TA0111","Privilege Escalation",{"id":32,"name":33},{"id":35,"name":36},{"id":138,"name":139},"TA0104","Execution",[141,145,147,149,151,153,155,157,159,161,163,165],{"id":142,"name":143,"tactic":144},"D3-SFA","System File Analysis",{"name":47},{"id":44,"name":45,"tactic":146},{"name":47},{"id":49,"name":50,"tactic":148},{"name":47},{"id":61,"name":62,"tactic":150},{"name":64},{"id":70,"name":71,"tactic":152},{"name":73},{"id":84,"name":85,"tactic":154},{"name":78},{"id":93,"name":94,"tactic":156},{"name":91},{"id":102,"name":103,"tactic":158},{"name":100},{"id":106,"name":107,"tactic":160},{"name":100},{"id":110,"name":111,"tactic":162},{"name":100},{"id":97,"name":98,"tactic":164},{"name":100},{"id":114,"name":115,"tactic":166},{"name":100},{"id":168,"name":169,"tactics":170,"countermeasures":176},"T1574.007","Path Interception by PATH Environment Variable",[171,172,173,174,175],{"id":130,"name":131},{"id":133,"name":134},{"id":32,"name":33},{"id":35,"name":36},{"id":138,"name":139},[177,179,181,183,185,187,189,191,193,195,197,199,201,203,205],{"id":44,"name":45,"tactic":178},{"name":47},{"id":49,"name":50,"tactic":180},{"name":47},{"id":53,"name":54,"tactic":182},{"name":47},{"id":57,"name":58,"tactic":184},{"name":47},{"id":61,"name":62,"tactic":186},{"name":64},{"id":70,"name":71,"tactic":188},{"name":73},{"id":84,"name":85,"tactic":190},{"name":78},{"id":93,"name":94,"tactic":192},{"name":91},{"id":102,"name":103,"tactic":194},{"name":100},{"id":106,"name":107,"tactic":196},{"name":100},{"id":110,"name":111,"tactic":198},{"name":100},{"id":97,"name":98,"tactic":200},{"name":100},{"id":114,"name":115,"tactic":202},{"name":100},{"id":118,"name":119,"tactic":204},{"name":100},{"id":122,"name":123,"tactic":206},{"name":100},{"id":208,"name":209,"techniques":210},"CAPEC-21","Exploitation of Trusted Identifiers",[211,307,337],{"id":212,"name":213,"tactics":214,"countermeasures":218},"T1134","Access Token Manipulation",[215,216,217],{"id":32,"name":33},{"id":35,"name":36},{"id":133,"name":134},[219,221,225,229,233,237,241,245,249,253,257,261,265,269,273,277,281,285,287,291,295,299,301,303],{"id":39,"name":40,"tactic":220},{"name":42},{"id":222,"name":223,"tactic":224},"D3-NTPM","Network Traffic Policy Mapping",{"name":42},{"id":226,"name":227,"tactic":228},"D3-AM","Access Modeling",{"name":42},{"id":230,"name":231,"tactic":232},"D3-AEM","Application Exception Monitoring",{"name":47},{"id":234,"name":235,"tactic":236},"D3-SCA","System Call Analysis",{"name":47},{"id":238,"name":239,"tactic":240},"D3-CCSA","Credential Compromise Scope Analysis",{"name":47},{"id":242,"name":243,"tactic":244},"D3-OPM","Operational Process Monitoring",{"name":47},{"id":246,"name":247,"tactic":248},"D3-PSA","Process Spawn Analysis",{"name":47},{"id":250,"name":251,"tactic":252},"D3-ST","Session Termination",{"name":64},{"id":254,"name":255,"tactic":256},"D3-CR","Credential Revocation",{"name":64},{"id":258,"name":259,"tactic":260},"D3-ANCI","Authentication Cache Invalidation",{"name":64},{"id":262,"name":263,"tactic":264},"D3-DUC","Decoy User Credential",{"name":73},{"id":266,"name":267,"tactic":268},"D3-CH","Credential Hardening",{"name":78},{"id":270,"name":271,"tactic":272},"D3-MFA","Multi-factor Authentication",{"name":78},{"id":274,"name":275,"tactic":276},"D3-CRO","Credential Rotation",{"name":78},{"id":278,"name":279,"tactic":280},"D3-TB","Token Binding",{"name":78},{"id":282,"name":283,"tactic":284},"D3-TBA","Token-based Authentication",{"name":78},{"id":88,"name":89,"tactic":286},{"name":91},{"id":288,"name":289,"tactic":290},"D3-RIC","Reissue Credential",{"name":91},{"id":292,"name":293,"tactic":294},"D3-SCF","System Call Filtering",{"name":100},{"id":296,"name":297,"tactic":298},"D3-CTS","Credential Transmission Scoping",{"name":100},{"id":118,"name":119,"tactic":300},{"name":100},{"id":122,"name":123,"tactic":302},{"name":100},{"id":304,"name":305,"tactic":306},"D3-HBPI","Hardware-based Process Isolation",{"name":100},{"id":308,"name":309,"tactics":310,"countermeasures":314},"T1528","Steal Application Access Token",[311],{"id":312,"name":313},"TA0031","Credential Access",[315,317,319,321,323,325,327,329,331,333,335],{"id":238,"name":239,"tactic":316},{"name":47},{"id":254,"name":255,"tactic":318},{"name":64},{"id":258,"name":259,"tactic":320},{"name":64},{"id":262,"name":263,"tactic":322},{"name":73},{"id":266,"name":267,"tactic":324},{"name":78},{"id":270,"name":271,"tactic":326},{"name":78},{"id":274,"name":275,"tactic":328},{"name":78},{"id":278,"name":279,"tactic":330},{"name":78},{"id":282,"name":283,"tactic":332},{"name":78},{"id":288,"name":289,"tactic":334},{"name":91},{"id":296,"name":297,"tactic":336},{"name":100},{"id":338,"name":339,"tactics":340,"countermeasures":342},"T1539","Steal Web Session Cookie",[341],{"id":312,"name":313},[343,345,347,349,351,353,355,357,359],{"id":238,"name":239,"tactic":344},{"name":47},{"id":254,"name":255,"tactic":346},{"name":64},{"id":258,"name":259,"tactic":348},{"name":64},{"id":262,"name":263,"tactic":350},{"name":73},{"id":266,"name":267,"tactic":352},{"name":78},{"id":270,"name":271,"tactic":354},{"name":78},{"id":274,"name":275,"tactic":356},{"name":78},{"id":288,"name":289,"tactic":358},{"name":91},{"id":296,"name":297,"tactic":360},{"name":100},{"id":362,"name":363,"techniques":364},"CAPEC-274","HTTP Verb Tampering",[],{"id":366,"name":367,"techniques":368},"CAPEC-31","Accessing/Intercepting/Modifying HTTP Cookies",[369],{"id":338,"name":339,"tactics":370,"countermeasures":372},[371],{"id":312,"name":313},[373,375,377,379,381,383,385,387,389],{"id":238,"name":239,"tactic":374},{"name":47},{"id":254,"name":255,"tactic":376},{"name":64},{"id":258,"name":259,"tactic":378},{"name":64},{"id":262,"name":263,"tactic":380},{"name":73},{"id":266,"name":267,"tactic":382},{"name":78},{"id":270,"name":271,"tactic":384},{"name":78},{"id":274,"name":275,"tactic":386},{"name":78},{"id":288,"name":289,"tactic":388},{"name":91},{"id":296,"name":297,"tactic":390},{"name":100},{"id":392,"name":393,"techniques":394},"CAPEC-39","Manipulating Opaque Client-based Data Tokens",[],{"id":396,"name":397,"techniques":398},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":400,"name":401,"techniques":402},"CAPEC-77","Manipulating User-Controlled Variables",[],{"_key":404,"id":404,"name":405,"description":406,"type":15,"status":16,"abstraction":407,"likelihood_of_exploit":408,"capec":409},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.","Class","High",[],{"_key":411,"id":411,"name":412,"description":413,"type":15,"status":414,"abstraction":17,"likelihood_of_exploit":9,"capec":415},"CWE-90","Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')","The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.","Draft",[416],{"id":417,"name":418,"techniques":419},"CAPEC-136","LDAP Injection",[],[],[422],"GHSA-2p3q-h3hg-jcqq",[],[425,427,429],{"_key":426},"RHSA-2026:26638",{"_key":428},"RHSA-2026:39952",{"_key":430},"UBUNTU-CVE-2026-47303",[],[],"2026-07-14T18:45:33.438Z","2026-07-22T20:29:13.892Z","PUBLISHED",{"cisa_kev":437,"cisa_ransomware":437,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":438,"severity_score":439,"severity_version":440,"severity_source":441,"severity_vector":442,"severity_status":435},false,"high",8.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",[444,452,456,461,465,470],{"url":445,"sources":446,"tags":448},"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-47303",[441,447],"osv_nuget",[449,450,451],"Vendor Advisory","Patch","WEB",{"url":453,"sources":454,"tags":455},"https://github.com/dotnet/aspnetcore/security/advisories/GHSA-2p3q-h3hg-jcqq",[447],[451],{"url":457,"sources":458,"tags":459},"https://nvd.nist.gov/vuln/detail/CVE-2026-47303",[447],[460],"Advisory",{"url":462,"sources":463,"tags":464},"https://github.com/dotnet/announcements/issues/411",[447],[451],{"url":466,"sources":467,"tags":468},"https://github.com/dotnet/aspnetcore",[447],[469],"PACKAGE",{"url":471,"sources":472,"tags":473},"https://github.com/dotnet/aspnetcore/discussions/67786",[447],[451],[],[],[477,482],{"source":441,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":478,"cvss_v4_0":9},{"baseScore":439,"baseSeverity":479,"vectorString":442,"impactScore":480,"exploitabilityScore":481},"HIGH",9.8,7.2,{"source":447,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":483,"cvss_v4_0":9},{"baseScore":439,"baseSeverity":9,"vectorString":484,"impactScore":480,"exploitabilityScore":481},"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[486,499,507,515,526,534,542],{"ecosystem":9,"name":487,"vendor":488,"product":489,"cpe_part":490,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":491},"Microsoft Visual Studio 2022 version 17.12","microsoft","microsoft visual studio 2022 version 17.12","a",[492],{"version":493,"is_range":494,"range_type":441,"version_start":495,"version_start_type":496,"version_end":497,"version_end_type":498,"fixed_in":9},">= 17.12.0, \u003C 17.12.22",true,"17.12.0","including","17.12.22","excluding",{"ecosystem":9,"name":500,"vendor":488,"product":501,"cpe_part":490,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":502},"Microsoft Visual Studio 2022 version 17.14","microsoft visual studio 2022 version 17.14",[503],{"version":504,"is_range":494,"range_type":441,"version_start":505,"version_start_type":496,"version_end":506,"version_end_type":498,"fixed_in":9},">= 17.14.0, \u003C 17.14.36","17.14.0","17.14.36",{"ecosystem":9,"name":508,"vendor":488,"product":509,"cpe_part":490,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":510},"Microsoft Visual Studio 2026 version 18.7","microsoft visual studio 2026 version 18.7",[511],{"version":512,"is_range":494,"range_type":441,"version_start":513,"version_start_type":496,"version_end":514,"version_end_type":498,"fixed_in":9},">= 18.0, \u003C 18.7.4","18.0","18.7.4",{"ecosystem":9,"name":516,"vendor":488,"product":517,"cpe_part":490,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":518},".NET 10.0",".net 10.0",[519,523],{"version":520,"is_range":494,"range_type":441,"version_start":521,"version_start_type":496,"version_end":522,"version_end_type":498,"fixed_in":9},">= 10.0.0, \u003C 10.0.6","10.0.0","10.0.6",{"version":524,"is_range":494,"range_type":441,"version_start":521,"version_start_type":496,"version_end":525,"version_end_type":498,"fixed_in":9},">= 10.0.0, \u003C 10.0.10","10.0.10",{"ecosystem":9,"name":527,"vendor":488,"product":528,"cpe_part":490,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":529},".NET 8.0",".net 8.0",[530],{"version":531,"is_range":494,"range_type":441,"version_start":532,"version_start_type":496,"version_end":533,"version_end_type":498,"fixed_in":9},">= 8.0.0, \u003C 8.0.29","8.0.0","8.0.29",{"ecosystem":9,"name":535,"vendor":488,"product":536,"cpe_part":490,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":537},".NET 9.0",".net 9.0",[538],{"version":539,"is_range":494,"range_type":441,"version_start":540,"version_start_type":496,"version_end":541,"version_end_type":498,"fixed_in":9},">= 9.0.0, \u003C 9.0.18","9.0.0","9.0.18",{"ecosystem":543,"name":544,"vendor":543,"product":544,"cpe_part":9,"purl_type":545,"purl_namespace":9,"purl_name":544,"source":9,"versions":546},"NuGet","Microsoft.AspNetCore.Authentication.Negotiate","nuget",[547,550,552],{"version":548,"is_range":494,"range_type":549,"version_start":521,"version_start_type":496,"version_end":525,"version_end_type":498,"fixed_in":9},"gte10_0_0_lt10_0_10","ecosystem",{"version":551,"is_range":494,"range_type":549,"version_start":540,"version_start_type":496,"version_end":541,"version_end_type":498,"fixed_in":9},"gte9_0_0_lt9_0_18",{"version":553,"is_range":494,"range_type":549,"version_start":532,"version_start_type":496,"version_end":533,"version_end_type":498,"fixed_in":9},"gte8_0_0_lt8_0_29"]