CVE-2026-54774

Published: Jul 8, 2026Modified: Jul 10, 2026Deferred

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: security-advisories@github.com (Secondary)

Description

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, SamlSerializer skips final SignatureValue verification when a CoreWCF service validates SAML tokens using a non-X.509 signing token, allowing an attacker to reference a non-X.509 SecurityToken key identifier and bypass assertion signature verification. This issue is fixed in versions 1.8.1 and 1.9.1.

Related CWEs

Insufficient Verification of Data Authenticity

The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (6)

https://github.com/CoreWCF/CoreWCF/commit/65d09022749854ba943e376aefb958dec05b00d8

Source: security-advisories@github.com

https://github.com/CoreWCF/CoreWCF/commit/b914495ce63c44924664643b60a262e7595081a4

Source: security-advisories@github.com

https://github.com/CoreWCF/CoreWCF/commit/e7454132876ecc7e2cf80e541a44376eeb54979b

Source: security-advisories@github.com

https://github.com/CoreWCF/CoreWCF/releases/tag/v1.8.1

Source: security-advisories@github.com

https://github.com/CoreWCF/CoreWCF/releases/tag/v1.9.1

Source: security-advisories@github.com

https://github.com/CoreWCF/CoreWCF/security/advisories/GHSA-rpj7-hr7h-w6p9

Source: security-advisories@github.com

Timeline

No history available yet.