AdvisorydotNET
KB5091596 Patches Critical ASP.NET Core DataProtection Cookie Forging Flaw
KB5091596 is a .NET 10.0.7 out-of-band security update patching CVE-2026-40372, a critical ASP.NET Core DataProtection HMAC bypass allowing authentication cookie forging and privilege escalation. Update immediately.