ByteOS Network

NVD Vulnerability Details :

CVE-2026-54777

Deferred

Source-security-advisories@github.com

Published At-08 Jul, 2026 | 22:17

Updated At-10 Jul, 2026 | 05:16

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF NetNamedPipe transport accepts attachment to a pre-existing named pipe instance, allowing local interception of NetNamedPipe traffic when an attacker races NamedPipeListener startup between shared memory GUID publication and service named pipe creation. This issue is fixed in versions 1.8.1 and 1.9.1.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
			N/A

Type: Secondary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

Weaknesses

CWE ID	Type	Source
CWE-367	Secondary	security-advisories@github.com
CWE-665	Secondary	security-advisories@github.com

CWE ID: CWE-367

Type: Secondary

Source: security-advisories@github.com

CWE ID: CWE-665

Type: Secondary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/CoreWCF/CoreWCF/commit/8ed9c780c7c6fb22fa215c5771dee0c1e49596b7	security-advisories@github.com	N/A
https://github.com/CoreWCF/CoreWCF/commit/e7d225394fd429900dcbc445dcdd53b94e964077	security-advisories@github.com	N/A
https://github.com/CoreWCF/CoreWCF/releases/tag/v1.8.1	security-advisories@github.com	N/A
https://github.com/CoreWCF/CoreWCF/releases/tag/v1.9.1	security-advisories@github.com	N/A
https://github.com/CoreWCF/CoreWCF/security/advisories/GHSA-6jj2-4q5c-x8g6	security-advisories@github.com	N/A