{"id":"CVE-2026-88092","details":"Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.","aliases":["BIT-aspnet-core-2026-88092","GHSA-rv87-ccxw-8ggf"],"modified":"2026-10-24T10:53:57.084375322Z","published":"2026-10-13T19:21:27.043Z","related":["ALSA-2026:86168","ALSA-2026:86169","ALSA-2026:86170","ALSA-2026:86171","ALSA-2026:86172","ALSA-2026:86192","ALSA-2026:86193","ALSA-2026:86195","ALSA-2026:86594"],"database_specific":{"unresolved_ranges":[{"vendor_product":"microsoft:visual_studio_2022","cpes":["cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"17.14.0"},{"fixed":"17.14.42"}],"source":"CPE_RANGE"}]},{"cpes":["cpe:2.3:a:microsoft:visual_studio_2026:*:*:*:*:*:*:*:*"],"extracted_events":[{"source":"CPE_RANGE","range":[{"introduced":"18.10.0"},{"fixed":"18.10.4"}]}],"vendor_product":"microsoft:visual_studio_2026"},{"vendor_product":"microsoft:asp.net_core","cpes":["cpe:2.3:a:microsoft:asp.net_core:11.0:rc1:*:*:*:*:*:*"],"extracted_events":[{"range":[{"introduced":"11.0-rc1"},{"last_affected":"11.0-rc1"}],"source":"CPE_STRING"}]}]},"references":[{"type":"FIX","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88092"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/dotnet/aspnetcore","events":[{"introduced":"3f1acb59718cadf111a0a796681e3d3509bb3381"},{"fixed":"7413d24330774263a78a4f3837ca53493518455a"},{"introduced":"af22effae4069a5dfb9b0735859de48820104f5b"},{"fixed":"b4d87e3b9131a019bc3b51df99ff69ac79bef459"},{"introduced":"7387de91234d3ef751fa50b3d1bfede4130213ff"},{"fixed":"0ef4bbfa3291b306a21e5001cb0491277bdd35bc"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"8.0.0"},{"fixed":"8.0.32"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*"},{"source":"CPE_RANGE","cpe":"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*","range":[{"introduced":"9.0.0"},{"fixed":"9.0.21"}]},{"range":[{"introduced":"10.0.0"},{"fixed":"10.0.13"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*"}]}}],"versions":["v8.0.31","v10.0.12","v8.0.30","v10.0.11","v8.0.29","v10.0.10","v8.0.28","v10.0.9","v8.0.27","v10.0.8","v8.0.26","v10.0.7","v10.0.6","v8.0.25","v10.0.5","v10.0.4","v10.0.105","v10.0.104","v8.0.24","v10.0.3","v8.0.23","v10.0.2","v10.0.1","v8.0.22","v10.0.0","v8.0.21","v8.0.20","v8.0.19","v8.0.18","v8.0.17","v8.0.16","v8.0.15","v8.0.14","v8.0.13","v8.0.12","v8.0.11","v8.0.10","v8.0.8","v8.0.7","v8.0.5","v8.0.4","v8.0.3","v8.0.2","v8.0.1","v8.0.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-88092.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L"}]}