CVE-2026-54772

Name of the Vulnerable Software and Affected Versions CoreWCF versions prior to 1.8.1 CoreWCF versions prior to 1.9.1

Description An unauthenticated remote attacker can trigger premature EOF (End of File) handling during the framing handshake of the net.tcp, net.pipe, or net.uds components. This occurs when the attacker can reach endpoints using NetTcpBinding, NetNamedPipeBinding, or UnixDomainSocketBinding, allowing them to pin one server thread-pool worker at full CPU capacity per connection. Consequently, a small number of connections can exhaust the server CPU resources.

Recommendations Update CoreWCF to version 1.8.1. Update CoreWCF to version 1.9.1.