Skip to content
OpenAdvisories

Vendor

CoreWCF

14 known vulnerabilities.

Products

CoreWCF 14
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-54775

    CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.

    CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops processing new records from that topic when KafkaTransportPump receives a null-value tom…

    CoreWCF CoreWCF CoreWCF.Kafka NuGet
  • Medium 6.2
    CVE-2026-54778

    CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution

    CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF UnixDomainSocket POSIX peer identity resolution uses non-reentrant getpwuid and getgrgid calls, allowing concurrent connections to …

    CoreWCF CoreWCF CoreWCF.UnixDomainSocket NuGet
  • Medium 5.9
    CVE-2026-54773

    CoreWCF: WS-Security signature substitution via document-wide Signature lookup

    CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security signature verification performs a document-wide ds:Signature lookup, allowing an unauthenticated remote attacker to pla…

    CoreWCF CoreWCF CoreWCF.Primitives NuGet
  • Medium 5.9
    CVE-2026-54779

    CoreWCF: SAML token replay protection is inoperative

    CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token replay protection is inoperative because DefaultTokenReplayCache.TryAdd does not reject duplicate tokens when DetectRepl…

    CoreWCF CoreWCF CoreWCF.Primitives NuGet
  • Medium 4.4
    CVE-2026-54776

    CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade

    CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service hosted on Unix Domain Sockets with PosixIdentity client credentials can accept connections that skip the application/unix…

    CoreWCF CoreWCF CoreWCF.UnixDomainSocket NuGet
  • Medium 6.5
    CVE-2026-54777

    CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance

    CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF NetNamedPipe transport accepts attachment to a pre-existing named pipe instance, allowing local interception of NetNamedPipe traffi…

    CoreWCF CoreWCF CoreWCF.NetNamedPipe NuGet