Beveiligingsadvies

CVE-2026-54775

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-08 22:13:37
Laatst bijgewerkt 2026-07-09 14:20:32
Toegewezen door GitHub_M
CVSS-score 6.5
Status PUBLISHED

Beschrijving

CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops processing new records from that topic when KafkaTransportPump receives a null-value tombstone record, causing a persistent endpoint denial of service for attackers with produce permission. This issue is fixed in versions 1.8.1 and 1.9.1.