CVE-2026-54779

MEDIUM

CoreWCF: SAML token replay protection is inoperative

Title source: cna
STIX 2.1

Description

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token replay protection is inoperative because DefaultTokenReplayCache.TryAdd does not reject duplicate tokens when DetectReplayedTokens is enabled, allowing a captured token to be reused. This issue is fixed in versions 1.8.1 and 1.9.1.

References (6)

Core 6

Scores

CVSS v3 5.9
EPSS 0.0027
EPSS Percentile 18.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-294 CWE-613
Status published
Products (2)
CoreWCF/CoreWCF < 1.8.1
CoreWCF/CoreWCF >= 1.9.0, < 1.9.1
Published Jul 08, 2026
Tracked Since Jul 09, 2026