CVE-2026-70188: dotnet: ASP.NET Core Kestrel: Security feature bypass via improper newline handling in HTTP/2

Severity: Critical

CVSS Score: 9.1

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.