Critical Microsoft ASP.NET Security Flaw Fixed — Update Your Servers Now
Microsoft quietly pushed an emergency patch for a critical ASP.NET Core vulnerability (CVE-2026-40372) that lets attackers hijack accounts and steal data. If your website or web app runs on ASP.NET Core 10.x on Linux or macOS, here's exactly what you need to do right now.