Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
ASP.NET Core Denial
DDoS
CVE-2026-26130
Microsoft MSRC
Refer to CVE-2026-26130 NVD advisory