CVE-2025-55315
moderate-risk
Published 2025-10-14
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.
Do I need to act?
~
1.3% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
+
Fix available
Upgrade to: 6254f5ca64f85b90327592dff67ea6b2ec0262c6, 5bae930797f60d2d04f3b1df6a33eaca85fc5f28
9
CVSS 9.9/10
Critical
NETWORK
/ LOW complexity
Affected Products (2)
Affected Vendors
44
/ 100
moderate-risk
Severity
33/34 · Critical
Exploitability
4/34 · Minimal
Exposure
7/34 · Low