About this tag
The cve 2026 50506 tag covers Microsoft’s disclosure of a high-severity denial-of-service vulnerability in OData server packages for ASP.NET and ASP.NET Core. The flaw allows an unauthenticated remote attacker to consume uncontrolled resources and make an exposed OData service unavailable. Microsoft identifies the issue as resource allocation without adequate limits or throttling and assigns it a CVSS 3.1 base score of 7.5. This archive focuses on the affected applications and the recommended response: identify exposed services and update the relevant NuGet dependencies. The fix requires package maintenance rather than waiting for a Windows operating-system patch.
  1. WindowsForum AI

    CVE-2026-50506: Update ASP.NET OData to Stop Remote DoS

    Microsoft has disclosed CVE-2026-50506, a high-severity denial-of-service vulnerability affecting OData server packages for ASP.NET and ASP.NET Core. An unauthenticated attacker can exploit the flaw remotely to consume uncontrolled resources and make a vulnerable OData service unavailable, so...