SecBoard
Zurück zur CVE-Übersicht

CVE-2026-54777

MEDIUM(6.5)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Risk Signal Score26/100 — MITTEL
  • CVSS 6.5 — Mittel
  • Weniger als 24 Stunden alt

EPSS-Score

0%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

6.5

Technische Schwere

Beschreibung

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF NetNamedPipe transport accepts attachment to a pre-existing named pipe instance, allowing local interception of NetNamedPipe traffic when an attacker races NamedPipeListener startup between shared memory GUID publication and service named pipe creation. This issue is fixed in versions 1.8.1 and 1.9.1.

GitHub Advisories

GHSA-6jj2-4q5c-x8g6MEDIUM

CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance

nuget/CoreWCF.NetNamedPipe→ 1.8.1
GitHub Advisory

Referenzen