{"id":"CVE-2026-54780","title":"CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass","summary":"CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass","severity":"low","cvss":3.7,"cwe":["CWE-327","CWE-757"],"vendor":"CoreWCF","product":"CoreWCF.Primitives","ecosystem":"nuget","affected":["CoreWCF.Primitives < 1.8.1","CoreWCF.Primitives >= 1.9.0, < 1.9.1"],"patched":["CoreWCF.Primitives 1.8.1","CoreWCF.Primitives 1.9.1"],"published":"2026-06-19","updated":"2026-06-19","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-4v55-cpmv-3vcm","references":[{"url":"https://github.com/CoreWCF/CoreWCF/security/advisories/GHSA-4v55-cpmv-3vcm"},{"url":"https://github.com/advisories/GHSA-4v55-cpmv-3vcm"}],"tags":["ghsa","nuget"],"ingestedAt":"2026-06-22T13:35:24.426Z","epss":0.00237,"epssPercentile":0.15046,"slug":"CVE-2026-54780","body":"## Overview\n\n### Impact\nCoreWCF’s WS-Security 1.0 receive pipeline validates the `SignatureMethod` of an incoming `ds:SignedInfo` against the configured `SecurityAlgorithmSuite`, but does not validate the `DigestMethod` declared on each `ds:Reference`. As a result, a sender can populate `ds:SignedInfo` with `SignatureMethod` values the suite accepts (for example rsa-sha256 under Basic256Sha256) while declaring a per-reference `DigestMethod` the suite rejects (for example http://www.w3.org/2000/09/xmldsig#sha1). The signature is then verified where it permits SHA-1 digests, and the message is accepted.\n\n### Patches\nFixed in CoreWCF v1.8.1 and v1.9.1\n\n### Workarounds\nNone\n\n## Affected packages\n\n- `CoreWCF.Primitives < 1.8.1`\n- `CoreWCF.Primitives >= 1.9.0, < 1.9.1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `CoreWCF.Primitives 1.8.1`\n- `CoreWCF.Primitives 1.9.1`","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}