PT-2026-51072 · Nuget · Corewcf.Kafka

Publicado 2026-06-19 · Atualizado 2026-06-19 · CVE-2026-54775

OSV

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact

A CoreWCF service is running and listening on a Kafka topic receiving a null-value record will stop processing new records from that topic.

Preconditions

The attacker has produce/write permission on a topic that CoreWCF is consuming from. If the broker permits anonymous publishes, no authentication is required.

Patches

Fixed in CoreWCF v1.8.1 and v1.9.1

Workarounds

Only allow authenticated writes to a topic

Correção

Improper Check for Exceptional Conditions

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-754

CWE-755

CWE-248

Identificadores relacionados

CVE-2026-54775

GHSA-M744-JHQ9-PPW6

Produtos afetados

Corewcf.Kafka

Referências · 3

• https://github.com/CoreWCF/CoreWCF · Nota
• https://github.com/CoreWCF/CoreWCF/security/advisories/GHSA-m744-jhq9-ppw6 · Nota
• https://osv.dev/vulnerability/GHSA-m744-jhq9-ppw6 · Aviso do Fabricante