Microsoft’s March 10, 2026 servicing updates include a targeted fix for a denial‑of‑service weakness in ASP.NET Core — tracked as CVE‑2026‑26130 — that Microsoft and downstream trackers describe as an allocation-of-resources without limits issue that can be triggered remotely to make ASP.NET...