CVE-2026-112044 | dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29 Catalog API Extensions.cs AddApplicationServices improper authentication (Issue 997)

October 18, 2026 Yanac

A vulnerability marked as critical has been reported in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file src/Catalog.API/Extensions/Extensions.cs of the component Catalog API. The manipulation leads to improper authentication.

This vulnerability is documented as CVE-2026-112044. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More