CVE-2026-54776

creationtimestamp| type| source ---|---|--- 2026-07-09 01:54:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6joeibdx2x...

CVE-2026-54776 CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade

CoreWCF is a port of the service side of Windows Communication Foundation WCF to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service hosted on Unix Domain Sockets with PosixIdentity client credentials can accept connections that skip the application/unixposix stream upgrade before dispatching...