CVE-2026-45591: Patch ASP.NET Core SignalR DoS Now
CVE-2026-45591 lets unauthenticated attackers crash ASP.NET Core via SignalR MessagePack. Patch to .NET 8.0.28, 9.0.17, or 10.0.9. Self-contained apps need a rebuild.
Tools, open source, and developer productivity