Vulnerability · NVD

CVE-2025-55315

CVE-2025-55315 : critical severity (CVSS 9.9). No tracked catalog app is linked to this CVE.

Severity (CVSS): 9.9
Exploitation: 65.9 %
Tracked apps: 0
Still exposed: 0

Public exploit : ExploitDB Published on 2025-10-14

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an authorized attacker to bypass a security feature over a network.

Attack vector : Network No user interaction

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

EPSS 65.94% exploit likely percentile 99.3%

View on NVD ↗ Advisory · msrc.microsoft.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM