CVE-2026-54779CWE-294CWE-613

CoreWCF: SAML token replay protection is inoperative

Medium · published July 8, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML token replay protection is inoperative because DefaultTokenReplayCache.TryAdd does not reject duplicate tokens when DetectReplayedTokens is enabled, allowing a captured token to be reused. This issue is fixed in versions 1.8.1 and 1.9.1.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.7th percentile
Weaknesses
CWE-294 · Authentication Bypass by Capture-replay; CWE-613 · Insufficient Session Expiration
Published
2026-07-08T22:07Z
EPSS history
Timeline
  • 08 JUL 22:07Z
    CoreWCF: SAML token replay protection is inoperative
    cvelistv5