ASP.NET Core

1 posts

/aspnet-core-dataprotection-hmac-cve-2026-40372/featured-image.png
How CVE 2026 40372 Breaks ASP.NET Core Authentication

April 22, 2026

The security fix Microsoft shipped in 2010 to stop attackers from decrypting ASP.NET traffic and forging authentication cookies just got quietly broken by a …