Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, the CoreWCF WS-Security 1.0 receive pipeline validates ds:SignedInfo SignatureMethod against the configured SecurityAlgorithmSuite but does not validate each ds:Reference DigestMethod, allowing a sender to use a rejected digest algorithm such as SHA-1 while the message is still accepted. This issue is fixed in versions 1.8.1 and 1.9.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Critical zero-day CVE-2026-50751 (Check Point VPN) allows auth bypass, threatening data privacy & integrity in transit. New CoreWCF bug (CVE-2026-54780) also impacts backend comms (1 hr ago). Patch ASAP! #Cybersecurity #News #Anonymous
Post summary
The tweet announces two critical CVEs, highlighting an auth bypass in Check Point VPN and a CoreWCF bug, and urges users to apply patches immediately.