Skip to content
Corewcf vulnerabilities
Newest
-
corewcf
CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
CVE-2026-54784
Fix available
7.4 High
-
corewcf
CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages
CVE-2026-54783
Fix available
7.4 High
-
corewcf
CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation
CVE-2026-54782
Fix available
10.0 Critical
-
corewcf
CoreWCF: SAML SubjectConfirmation methods and holder-of-key proof keys are not enforced
CVE-2026-54781
Fix available
7.4 High
-
corewcf
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass
CVE-2026-54780
Fix available
3.7 Low
-
corewcf
CoreWCF: SAML token replay protection is inoperative
CVE-2026-54779
Fix available
5.9 Medium
-
corewcf
CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution
CVE-2026-54778
Fix available
6.2 Medium
-
corewcf
CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance
CVE-2026-54777
Fix available
6.5 Medium
-
corewcf
CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade
CVE-2026-54776
Fix available
4.4 Medium
-
corewcf
CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.
CVE-2026-54775
Fix available
6.5 Medium
-
corewcf
CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate
CVE-2026-54774
Fix available
7.4 High
-
corewcf
CoreWCF: WS-Security signature substitution via document-wide Signature lookup
CVE-2026-54773
Fix available
5.9 Medium
-
corewcf
CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake
CVE-2026-54772
Fix available
7.5 High
-
corewcf
CoreWCF NetFraming based services can leave connections open when they should be closed
CVE-2024-28252
Fix available
7.5 High