{"vulnerability": "CVE-2026-88092", "sightings": [{"uuid": "d1c610aa-d37f-4048-991c-669be25bd55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mxvzaoqqo62l", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-88092 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/759 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-10-15T12:01:04.571241Z"}, {"uuid": "32a4b7ed-1bcd-4797-8341-fe6b829fd68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3mgs2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:07:52.005087Z"}, {"uuid": "8e3359f0-635d-4cc4-a9a0-8caf0f16611a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbrkk2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:08:08.942360Z"}, {"uuid": "021d9246-f14f-422a-98ac-ced28c8144db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5t3ijs2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:07:49.107571Z"}, {"uuid": "d660bcf5-7e07-494d-8713-8717b40bad02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5tnth22m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:07:54.702261Z"}, {"uuid": "a0875a71-f371-4568-bf6e-09fd36388186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5u4uvc2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:07:57.404669Z"}, {"uuid": "c76d4e59-e88f-4e6b-95cb-7c882ae70753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uh32s2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:07:59.983395Z"}, {"uuid": "56b169fd-7dc1-4cc7-99d8-b9f8a7f38cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjt2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:08:14.911223Z"}, {"uuid": "979f5522-33f4-4f10-b263-faa7869bf521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsju2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:08:17.616127Z"}, {"uuid": "cc76ac7b-cb04-49c9-8638-c8013583ced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjv2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:08:20.361408Z"}, {"uuid": "dcf72042-49b7-4a91-b02e-a61d257338c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5upqfs2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:08:02.976131Z"}, {"uuid": "d2762460-cbf2-42ed-ac77-be05b7f3ffa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5uwryk2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:08:06.300642Z"}, {"uuid": "af848889-5df9-462c-b243-5347f5ef1b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjs2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:08:12.227794Z"}, {"uuid": "5ce89bea-275f-43e2-99fc-930ecd26b1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mxrq5vbsjw2m", "content": "CVE-2026-88092 - ASP.NET Core Security Feature Bypass 9.4\n\nRequest smuggling, this time over HTTP1. Not even 1.1, 1.\n\nSeverity does depend on what your app does. If you've written a proxy, bad news (Yarp is affected). Website for your cat photos not so much.", "creation_timestamp": "2026-10-13T19:08:22.978574Z"}, {"uuid": "6febf3dc-554c-4116-9b9d-fb295029e31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0423", "content": "", "creation_timestamp": "2026-10-13T11:49:46.000000Z"}, {"uuid": "ae09449e-0aa8-4214-8bf5-06dd23b5bb49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0426", "content": "", "creation_timestamp": "2026-10-13T11:56:15.000000Z"}, {"uuid": "843c129f-d7a3-460b-89b2-92d3c9d64ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxs2gcf4sc22", "content": "\ud83d\udea8 CVE-2026-88092 \u2014 CVSS 9.4 CRITICAL\n\nInconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-88092\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-13T22:11:27.688541Z"}, {"uuid": "40f4582a-aaf8-41b8-9633-7efae246f8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mxsere4kny2o", "content": "CVE-2026-88092 and CVE-2026-70188: Microsoft patched two critical HTTP request smuggling flaws in ASP.NET Core Kestrel. No exploitation is confirmed. Fixed in 8.0.32, 9.0.21, 10.0.13, and 11.0.0-rc.2.", "creation_timestamp": "2026-10-14T01:16:35.786885Z"}, {"uuid": "d752d723-057b-476c-953e-a762db990548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsqp3iivt2z", "content": "CVE-2026-88092 - microsoft.aspnetcore.app.runtime.linux-arm\nVersions of ASP.NET Core 8.0 through 11.0 that use the Kestrel web server may treat an incomplete HTTP request as two separate requests, opening a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #dotnet #CVE #infosec", "creation_timestamp": "2026-10-14T04:50:04.913352Z"}, {"uuid": "0f6b6e4d-16ab-4167-b324-e1b4600ef264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117438358811958686", "content": "CVE-2026-88092 ASP.NET Core Tampering Vulnerability Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.\nhttps://www.cve.org/CVERecord?id=CVE-2026-88092https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88092#Microsoft #ASP.NETCore10.0 #ASP.NETCore11.0 #ASP.NETCore8.0 #ASP.NETCore9.0 #MicrosoftVisualStudio2022version17.14 #MicrosoftVisualStudio2026version18.10#CVE_2026_88092#bot", "creation_timestamp": "2026-10-14T08:39:05.566677Z"}, {"uuid": "58be35f7-e2da-4344-88f4-af8e88ac3a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mxtis64vnp2r", "content": "\n\ud83d\udea8 New CRITICAL CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-88092 impacts Microsoft.AspNetCore.App.Runtime.linux-x64 in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/759\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-10-14T12:01:18.196861Z"}, {"uuid": "69bf8acc-0958-4585-924d-07ad80c26b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-88092", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-25", "content": "", "creation_timestamp": "2026-10-14T01:49:33.000000Z"}]}