Moderate severityNVD Advisory· Published Jun 19, 2026· Updated Jun 19, 2026
CoreWCF: SAML token replay protection is inoperative
CVE-2026-54779
Description
Impact
When enabling DetectReplayedTokens, a token can be replayed and will be detected despite it being reused.
Patches
Fixed in CoreWCF v1.8.1 and v1.9.1
Workarounds
Provide your own implementation of ITokenReplayCache with the correct behavior.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
CoreWCF.PrimitivesNuGet | < 1.8.1 | 1.8.1 |
CoreWCF.PrimitivesNuGet | >= 1.9.0, < 1.9.1 | 1.9.1 |
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
1- CoreWCF: 13 CVEs Disclosed in a Single Day — Critical SAML Bypass and WS-Security FlawsVypr Intelligence · Jun 19, 2026