Microsoft Patches “Highest Ever” Severity Flaw That Could Hijack User Credentials in ASP.NET Core

Microsoft has patched a critical ASP.NET Core vulnerability (CVE-2025-55315) affecting the Kestrel web server with the platform's highest-ever severity rating. This HTTP request smuggling flaw allows authenticated attackers to hijack credentials, bypass security controls, access sensitive ...