Cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3amicrosoftasp.net_core/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 00:46:22 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMicrosoft ASP.NET Core: HTTP Request Smuggling (CVE-2025-55315)https://feed.craftedsignal.io/briefs/2026-10-cve-2025-55315-aspnet/Thu, 29 Oct 2026 00:46:22 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cve-2025-55315-aspnet/A public proof-of-concept (PoC) exploit has been published for CVE-2025-55315, an HTTP request smuggling vulnerability in Microsoft ASP.NET Core.<p>CVE-2025-55315 is an HTTP request smuggling vulnerability involving malformed chunked encoding (LF-only line endings) and 'chUnKEd' header bypass. Public proof-of-concept exploitation code has been published. The vulnerability has a CVSS score of 9.9.</p> highadvisory