Security Check

security.bloxprod.io

Schwachstellen, die jetzt zählen.

CVE für Linux-Server, Android, Apple-Telefone, Windows, Browser, Krypto-Wallets und übrige Software. Ein Klick auf den Titel öffnet das Original beim Herausgeber.

10785Artikel
1386Kritisch
4873Hoch
1779Aktiv ausgenutzt
Kritisch 9.1Software

Aspire Security Feature Bypass Vulnerability

CVE-2026-118740Aspire.Dashboard.Sdk.linux-x64, Aspire.Dashboard.Sdk.linux-arm64, Aspire.Dashboard.Sdk.linux-musl-x6410. Nov 2026

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Aspire. This advisory provides guidance on updating affected applications and components. Aspire Dashboard's unauthenticated NotFound route can permit telemetry deletion in both standalone and AppHost-hosted deployments. In standalone deployments using browser-token authentication, it can also expose the browser token. ## Announcement Announcement for this issue…