CVE-2025-7326 json
EOL ASP.NET Core Elevation of Privilege Vulnerability
published 2025-07-08 16 mo ago modified 2026-10-22 17 d ago also BIT-aspnet-core-2025-7326 , BIT-dotnet-2025-7326 , BIT-dotnet-sdk-2025-7326 , EUVD-2025-20507
- cvss
- 7.0
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 53%
- public exploits
- 0
- none known
Summary
Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.
Patch / fix
- bitnami aspnet-core 8.0.1
- bitnami dotnet 8.0.1
- bitnami dotnet-sdk 6.0.418
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 15 mo ago
Exploit prediction
0.71% chance of exploitation in the next 30 days, higher than 53% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- herodevs.com https://www.herodevs.com/vulnerability-directory/cve-2025-7326?nes-for-.net referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H |
| OSV | 3.1 | 7.0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| bitnami | aspnet-core | >=6.0.0, <8.0.1 |
8.0.1 |
| bitnami | dotnet | >=6.0.0, <8.0.1 |
8.0.1 |
| bitnami | dotnet-sdk | >=6.0.0, <6.0.418 |
6.0.418 |
Affected products
- Microsoft ASP.NET Core 6.0
- Microsoft Microsoft.AspNetCore.Identity
- Microsoft Microsoft.AspNetCore.App.Runtime.win-arm
- Microsoft Microsoft.AspNetCore.App.Runtime.win-arm64
- Microsoft Microsoft.AspNetCore.App.Runtime.win-x64
- Microsoft Microsoft.AspNetCore.App.Runtime.win-x86
- Microsoft Microsoft.AspNetCore.App.Runtime.linux-arm
- Microsoft Microsoft.AspNetCore.App.Runtime.linux-arm64
- Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-arm
- Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
- Microsoft Microsoft.AspNetCore.App.Runtime.linux-musl-x64
- Microsoft Microsoft.AspNetCore.App.Runtime.linux-x64
- Microsoft Microsoft.AspNetCore.App.Runtime.osx-arm64
- Microsoft Microsoft.AspNetCore.App.Runtime.osx-x64
Classification
- Weakness
-
- CWE-1390 Weak Authentication
References
-
herodevs.com
/vulnerability-directory/cve-2025-7326?nes-for-.net
exploit, web
-
msrc.microsoft.com
/update-guide/vulnerability/CVE-2025-24070
vendor-advisory, web
-
cve.org
/CVERecord?id=CVE-2025-24070
related, web
-
herodevs.com
/vulnerability-directory/cve-2025-7326
web
-
nvd.nist.gov
/vuln/detail/CVE-2025-7326
web
Sources
- CVE List CVE-2025-7326
- NVD CVE-2025-7326
- OSV BIT-aspnet-core-2025-7326
- OSV BIT-dotnet-2025-7326
- OSV BIT-dotnet-sdk-2025-7326
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.