https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:43:37.291433+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-54774 CVE-2026-54774 — CoreWCF: SamlSerializer skips SignatureValue verification when SAML signing token is not an X.509 certificate 2026-10-08T00:43:37.306105+00:00

Affected: CoreWCF

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, SamlSerializer skips final SignatureValue verification when a CoreWCF service validates SAML tokens using a non-X.509 signing token, allowing an attacker to reference a non-X.509 SecurityToken key identifier and bypass assertion signature verification. This issue is fixed in versions 1.8.1 and 1.9.1.