CVE-2026-54779: Corewcf Token Replay Unconditional Truecve-2026-54779-corewcf-token-replay-unconditional-true
The `TryAdd` method for a token replay cache always returns `true` (or lacks a `return false;` path). If it does not explicitly return `false` on duplicate items, calling components will assume the token is new, preventing replay protection from working successfully. Ensure the method returns `false` when the token already exists in the cache.
