What’s Vulnerable › Products
dotnet eShop vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your dotnet eShop version is affected
Latest dotnet eShop vulnerabilities
- CVE-2026-112044 — dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication (CVSS 7.3)
- CVE-2026-105444 — dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection (CVSS 6.3)