devtake.dev — #cve-2026-40372Articles tagged cve-2026-40372 on devtake.dev.https://devtake.dev/en-usMicrosoft rushed an out-of-band ASP.NET Core patch. If you shipped between April 14 and April 21, you need to rebuild.https://devtake.dev/article/microsoft-aspnet-emergency-patch/https://devtake.dev/article/microsoft-aspnet-emergency-patch/CVE-2026-40372 lets attackers forge auth cookies on .NET 10.0.6 apps on Linux and macOS. The fix is 10.0.7. Here's what broke, who's exposed, and how to patch.Thu, 23 Apr 2026 09:30:00 GMTsecuritymicrosoftaspnetdotnetcve-2026-40372data-protectionout-of-band-patchsupply-chaineditorial-team