CVE-2026-54780 | CoreWCF up to 1.8.0/1.9.0 WS-Security 1.0 Receive Pipeline weak password hash

A vulnerability described as problematic has been identified in CoreWCF up to 1.8.0/1.9.0. This affects an unknown part of the component WS-Security 1.0 Receive Pipeline. Such manipulation leads to password hash with insufficient computational effort.

This vulnerability is referenced as CVE-2026-54780. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More