Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-25667

ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QUIC packet, because of an incorrect exit condition for HTTP/3 Encoder/Decoder stream processing.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.3%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-25667
  • Microsoft » .net » Version: 8.0.0
    cpe:2.3:a:microsoft:.net:8.0.0
  • Microsoft » .net » Version: 8.0.1
    cpe:2.3:a:microsoft:.net:8.0.1
  • Microsoft » .net » Version: 8.0.10
    cpe:2.3:a:microsoft:.net:8.0.10
  • Microsoft » .net » Version: 8.0.11
    cpe:2.3:a:microsoft:.net:8.0.11
  • Microsoft » .net » Version: 8.0.12
    cpe:2.3:a:microsoft:.net:8.0.12
  • Microsoft » .net » Version: 8.0.13
    cpe:2.3:a:microsoft:.net:8.0.13
  • Microsoft » .net » Version: 8.0.14
    cpe:2.3:a:microsoft:.net:8.0.14
  • Microsoft » .net » Version: 8.0.15
    cpe:2.3:a:microsoft:.net:8.0.15
  • Microsoft » .net » Version: 8.0.16
    cpe:2.3:a:microsoft:.net:8.0.16
  • Microsoft » .net » Version: 8.0.17
    cpe:2.3:a:microsoft:.net:8.0.17
  • Microsoft » .net » Version: 8.0.18
    cpe:2.3:a:microsoft:.net:8.0.18
  • Microsoft » .net » Version: 8.0.19
    cpe:2.3:a:microsoft:.net:8.0.19
  • Microsoft » .net » Version: 8.0.2
    cpe:2.3:a:microsoft:.net:8.0.2
  • Microsoft » .net » Version: 8.0.20
    cpe:2.3:a:microsoft:.net:8.0.20
  • Microsoft » .net » Version: 8.0.21
    cpe:2.3:a:microsoft:.net:8.0.21
  • Microsoft » .net » Version: 8.0.3
    cpe:2.3:a:microsoft:.net:8.0.3
  • Microsoft » .net » Version: 8.0.4
    cpe:2.3:a:microsoft:.net:8.0.4
  • Microsoft » .net » Version: 8.0.5
    cpe:2.3:a:microsoft:.net:8.0.5
  • Microsoft » .net » Version: 8.0.6
    cpe:2.3:a:microsoft:.net:8.0.6
  • Microsoft » .net » Version: 8.0.7
    cpe:2.3:a:microsoft:.net:8.0.7
  • Microsoft » .net » Version: 8.0.8
    cpe:2.3:a:microsoft:.net:8.0.8
  • Microsoft » .net » Version: 8.0.9
    cpe:2.3:a:microsoft:.net:8.0.9
  • Microsoft » .net » Version: 9.0.0
    cpe:2.3:a:microsoft:.net:9.0.0
  • Microsoft » .net » Version: 9.0.1
    cpe:2.3:a:microsoft:.net:9.0.1
  • Microsoft » .net » Version: 9.0.10
    cpe:2.3:a:microsoft:.net:9.0.10
  • Microsoft » .net » Version: 9.0.2
    cpe:2.3:a:microsoft:.net:9.0.2
  • Microsoft » .net » Version: 9.0.3
    cpe:2.3:a:microsoft:.net:9.0.3
  • Microsoft » .net » Version: 9.0.4
    cpe:2.3:a:microsoft:.net:9.0.4
  • Microsoft » .net » Version: 9.0.5
    cpe:2.3:a:microsoft:.net:9.0.5
  • Microsoft » .net » Version: 9.0.6
    cpe:2.3:a:microsoft:.net:9.0.6
  • Microsoft » .net » Version: 9.0.7
    cpe:2.3:a:microsoft:.net:9.0.7
  • Microsoft » .net » Version: 9.0.8
    cpe:2.3:a:microsoft:.net:9.0.8
  • Microsoft » .net » Version: 9.0.9
    cpe:2.3:a:microsoft:.net:9.0.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved