"A regression in the Microsoft.AspNetCore.DataProtection 10.0.0-10.0.6 NuGet packages cause the managed authenticated ...
Patching is not enough: applications embedding the insecure library will need to be rebuilt, and affected tokens and cookies ...
Microsoft has released an out-of-band .NET 10.0.7 update to fix a critical ASP.NET Core Data Protection vulnerability (CVE-2026-40372) that could let unauthenticated attackers gain SYSTEM privileges ...