https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:39:45.384697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335330 EUVD-2026-335330 2026-10-06T01:39:45.431734+00:00 EUVD-2026-335330 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54772 fkie_cve-2026-54772 2026-10-06T01:39:45.431771+00:00

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, an unauthenticated remote attacker that can reach a NetTcpBinding, NetNamedPipeBinding, or UnixDomainSocketBinding endpoint can trigger premature EOF handling in the CoreWCF net.tcp, net.pipe, or net.uds framing handshake and pin one server thread-pool worker at full CPU per connection. This issue is fixed in versions 1.8.1 and 1.9.1.

 https://cve.radiocsirt.org/vuln/ghsa-p86g-xrr2-pf7c GHSA-p86g-xrr2-pf7c — CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake 2026-10-06T01:39:45.431805+00:00

Affected: NuGet: CoreWCF.NetFramingBase

### Impact An unauthenticated remote attacker can pin one server thread‑pool worker at 100 % CPU per connection. With a few connections, the CPU usage can be exhausted.

#### Preconditions An attacker being able to reach a service which is exposing an endpoint using one of NetTcpBinding, NetNamedPipeBinding, or UnixDomainSocketBinding.

### Patches Fixed in CoreWCF v1.8.1 and v1.9.1

### Workarounds None