WORLD WATCH · November 11, 2026 · EXPOSURE

CVE-2026-114154 ASP.NET Core Denial of Service Vulnerability

The Intel128 wire recorded this event in the exposure category.

Plain-English brief. Written for readers who work in a second language.

Key takeaways

• The lead report comes from MSRC.
• 1 outlet reported this event in the same window.
• Intel128 has no independent confirmation of the impact yet.
• Updated the products listed in the Security Updates table. This is an informational change only.

What happened

The report comes from MSRC.

1 outlet reported this event in the same window. The lead item appears below.

• CVE-2026-114154 ASP.NET Core Denial of Service Vulnerability
• CVE-2026-109475 .NET Denial of Service Vulnerability
• CVE-2026-114149 ASP.NET Core Denial of Service Vulnerability

Why it matters

Intel128 has no independent confirmation of the scale or the impact at this time. Treat every detail as open until a vendor or a national authority publishes an assessment.

What to do

• Check your estate for the product or the version named in the report.
• Apply the vendor patch when the vendor publishes it.
• Put the event on the agenda of your next intelligence meeting.

SOURCE: INTEL128 WORLD WATCH (UPDATED NOV 11, 2026). This brief summarizes reporting by MSRC. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.