Urgent Patch Issued for Critical Data Protection Flaw in ASP.NET Core
Microsoft issued an emergency patch for a critical vulnerability (CVE-2026-40372) in the ASP.NET Core DataProtection NuGet package. The flaw allows unauthenticated attackers to forge credentials and gain SYSTEM privileges on…