#CoreWCF
Introducing CoreWCF and WCF Client Azure Queue Storage bindings for .NET
Introducing CoreWCF and WCF Client Azure Queue Storage bindings for .NET - .NET Blog
The initial beta release of the official libraries Microsoft.CoreWCF.Azure.StorageQueues and Microsoft.WCF.Azure.StorageQueues.Client library for .NET is now available.
devdigest.today
July 19, 2024 at 6:51 AM
CoreWCF: Basic OpenTelemetry support.

buff.ly/HyCRINj

#dotnet #wcf #corewcf #dotnetcore #opentelemetry
Basic OpenTelemetry support
Introduction
buff.ly
July 29, 2025 at 5:01 PM
✅ New post in my Modernizing .NET series: Validators in CoreWCF — how to bring back pre‑deserialization SOAP validation using AssertValidator + ParameterInspector.
🔗 medium.com/@michael.kop...
#DotNet #DotNetCore #DotNet8 #DotNet9 #DotNet10 #ASPNet #ASPNetCore #CoreWCF #WCF #SOAP #CSharp
✅ Modernizing .NET — Part 6: Validators in CoreWCF
How to implement pre-deserialization SOAP validation in CoreWCF using AssertValidator and IParameterInspector.
medium.com
December 18, 2025 at 8:57 AM
Next part of Modernizing .NET:
🧼 Part 3 - Migrating WCF SOAP services to .NET 8? I used CoreWCF to keep legacy endpoints alive—no rewrite needed.
🔗 medium.com/@michael.kop...
#WCF #CoreWCF #SOAP
#DotNet #DotNet8 #DotNet9 #ASPNetFramework #ASPNet #ASPNetCore #CSharp
🧼 Modernizing .NET — Part 3: Surviving SOAP with CoreWCF
How I revived legacy WCF SOAP services in .NET 8 using CoreWCF — without rewriting hundreds of public endpoints.
medium.com
November 18, 2025 at 5:44 PM
📑 New post: Modernizing .NET – Part 5
CoreWCF gives you SOAP, but no docs. Here's how to rebuild .asmx-style documentation using WSDL + reflection.
🔗 medium.com/@michael.kop...
#dotnet #dotnet10 #WCF #SOAP #WSDL #CSharp #aspnet #aspnetcore
📑 Modernizing .NET — Part 5: Documentation in CoreWCF
How to recreate legacy-style SOAP documentation pages in CoreWCF using reflection and WSDL parsing.
medium.com
December 8, 2025 at 12:18 PM
CVE-2026-54782 - CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation
CVE ID : CVE-2026-54782

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF...
CVE-2026-54782 - CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF SAML 1.1 and SAML 2.0 token validation does not correctly resolve the issuer signing key or require signed tokens when IdentityConfiguration is used with federated bindings, allowing an …
cvefeed.io
July 9, 2026 at 1:49 AM
My stackoverflow question was closed so here's a blog post about CoreWCF | Discussion
My SO question was closed so I'm writing this post on CoreWCF
A question about WCF Streams
richardcocks.github.io
May 8, 2025 at 12:40 PM
My stackoverflow question was closed so here's a blog post about CoreWCF (richardcocks.github.io)

Discussion | Main Link
May 8, 2025 at 9:06 PM
CVE-2026-54780 - CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass
CVE ID : CVE-2026-54780

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. P...
CVE-2026-54780 - CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, the CoreWCF WS-Security 1.0 receive pipeline validates ds:SignedInfo SignatureMethod against the configured SecurityAlgorithmSuite but does not validate each ds:Reference DigestMethod, allowing a sender to use a rejected digest algorithm …
cvefeed.io
July 9, 2026 at 1:44 AM
My stackoverflow question was closed so here's a blog post about CoreWCF https://richardcocks.github.io/2025-05-08-CoreWCF.html (https://news.ycombinator.com/item?id=43925355)
My SO question was closed so I'm writing this post on CoreWCF
A question about WCF Streams
richardcocks.github.io
May 8, 2025 at 12:52 PM
No, we managed to migrate away from it. Last piece was a old asmx web service. We migrated it to CoreWCF.
March 28, 2025 at 6:59 AM
📚 New post: Modernizing .NET – Part 4 - WSDL in CoreWCF
Here's how to fix the WSDL so clients don't break.
🔗 medium.com/@michael.kop...
#dotnet #dotnet10 #WCF #SOAP #WSDL #CSharp #aspnet #aspnetcore
📚 Modernizing .NET — Part 4: WSDL in CoreWCF
How to customize CoreWCF’s auto-generated WSDL to match legacy SOAP expectations and ensure client compatibility.
medium.com
November 27, 2025 at 11:28 AM
知らんかったけど、WCF のサポートまだあるのか。
devblogs.microsoft.com/dotnet/migra...
Bring WCF apps to the latest .NET with CoreWCF and Upgrade Assistant - .NET Blog
The Upgrade Assistant can now migrate .NET Framework projects using WCF to .NET 6 or later versions with CoreWCF.
devblogs.microsoft.com
August 5, 2024 at 8:34 PM
.NET Conf 2023 par #MTG, l'agenda des sessions est disponible ! Retrouvez nous le 5 et 6 décembre 2023 directement sur notre Discord discord.gg/WtRDmNUze3?e... ou sur notre chaine Youtube youtube.com/watch?v=sbg-fy
December 4, 2023 at 10:04 AM
📰 New article by Vishwanath Uppala

Modernize your legacy WCF services: Automated migration to ASP.NET Core Web API using AWS Transform custom

#AWS #DotNet
Modernize your legacy WCF services: Automated migration to ASP.NET Core Web API using AWS Transform custom
Enterprises who need to migrate business-critical Windows Communication Foundation (WCF) services to ASP.NET Core Web API sometimes struggle with the scope of the change. These services still run on .NET Framework, the pool of engineers fluent in service contracts keep shrinking, and modern .NET does not support WCF. The community CoreWCF project (a .NET Foundation [...]
aws.amazon.com
September 9, 2026 at 8:46 PM
WitRPC vs SignalR vs gRPC vs CoreWCF: measured benchmarks, transports, serialization and Blazor support, with an open-source benchmark suite. #dotnet
Choosing the Right RPC Framework for .NET
hackernoon.com
August 12, 2026 at 7:22 AM
CVE-2026-54772 - CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake
CVE ID : CVE-2026-54772

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the service side of Window...
CVE-2026-54772 - CoreWCF: Pre-authentication infinite-loop CPU exhaustion in CoreWCF net.tcp / net.pipe / net.uds framing handshake
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, an unauthenticated remote attacker that can reach a NetTcpBinding, NetNamedPipeBinding, or UnixDomainSocketBinding endpoint can trigger premature EOF handling in the CoreWCF net.tcp, net.pipe, or net.uds framing handshake and pin …
cvefeed.io
July 9, 2026 at 1:16 AM
CVE-2026-54778 - CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution
CVE ID : CVE-2026-54778

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Pr...
CVE-2026-54778 - CoreWCF: UnixDomainSocket Non-Reentrant POSIX Identity Resolution
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF UnixDomainSocket POSIX peer identity resolution uses non-reentrant getpwuid and getgrgid calls, allowing concurrent connections to attribute one connection's identity to another or crash the host process under contention. …
cvefeed.io
July 9, 2026 at 1:59 AM
CVE-2026-54776 - CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade
CVE ID : CVE-2026-54776

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the service side of Windows Communicat...
CVE-2026-54776 - CoreWCF: Unix Domain Socket PosixIdentity transport accepts connections that skip the security upgrade
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service hosted on Unix Domain Sockets with PosixIdentity client credentials can accept connections that skip the application/unixposix stream upgrade before dispatching messages, bypassing framing-layer identity checks in …
cvefeed.io
July 9, 2026 at 1:54 AM
🚨 EUVD-2026-42461
📊 4.4/10
🏢 CoreWCF

📝 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service hosted on Unix D...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42461

#cybersecurity #infosec #cve #euvd
July 9, 2026 at 1:00 AM
CVE-2026-54783 - CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages
CVE ID : CVE-2026-54783

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the serv...
CVE-2026-54783 - CoreWCF: XML Signature Wrapping in WS-Security endorsing/supporting signature verification allows replay of captured signed messages
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security endorsing and supporting signature verification does not ensure the selected ds:Signature covers the expected Security header target, allowing an attacker with one captured signed SOAP envelope to …
cvefeed.io
July 9, 2026 at 2:04 AM
CVE-2026-54773 - CoreWCF: WS-Security signature substitution via document-wide Signature lookup
CVE ID : CVE-2026-54773

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to ...
CVE-2026-54773 - CoreWCF: WS-Security signature substitution via document-wide Signature lookup
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF WS-Security signature verification performs a document-wide ds:Signature lookup, allowing an unauthenticated remote attacker to place a SOAP header before wsse:Security and cause WSSecurityOneDotZeroReceiveSecurityHeader to verify an attacker-supplied signature …
cvefeed.io
July 9, 2026 at 1:13 AM
CVE-2026-54784 - CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
CVE ID : CVE-2026-54784

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to ...
CVE-2026-54784 - CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. In version 1.9.0, CoreWCF SPNEGO SecurityContextToken negotiation can expose the proof key recovered from the RSTR when TransportWithMessageCredential with Windows client credentials and session establishment are used, allowing an observer to impersonate the authenticated …
cvefeed.io
July 9, 2026 at 1:22 AM
CVE-2026-54775 - CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.
CVE ID : CVE-2026-54775

Published : July 8, 2026, 11:16 p.m. | 31 minutes ago

Description : CoreWCF is a port of the se...
CVE-2026-54775 - CoreWCF: Kafka consume pump halts permanently on a Kafka tombstone (null-value record), causing persistent endpoint denial of service.
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, a CoreWCF service listening on a Kafka topic stops processing new records from that topic when KafkaTransportPump receives a null-value tombstone record, causing a persistent endpoint denial of service …
cvefeed.io
July 9, 2026 at 1:30 AM