https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:25:37.487504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-318555 EUVD-2026-318555 2026-10-06T22:25:37.493917+00:00 EUVD-2026-318555 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39906 fkie_cve-2026-39906 2026-10-06T22:25:37.493980+00:00

Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting TCP channel that allows remote unauthenticated attackers to leak NTLMv2 machine-account hashes by supplying a Windows UNC path as a target file argument through object-unmarshalling techniques. Attackers can capture the leaked NTLMv2 hash and relay it to other hosts to achieve privilege escalation or lateral movement depending on network configuration and patch level.

 https://cve.radiocsirt.org/vuln/ghsa-qhm2-fwj3-3r79 GHSA-qhm2-fwj3-3r79 2026-10-06T22:25:37.494039+00:00

Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting TCP channel that allows remote unauthenticated attackers to leak NTLMv2 machine-account hashes by supplying a Windows UNC path as a target file argument through object-unmarshalling techniques. Attackers can capture the leaked NTLMv2 hash and relay it to other hosts to achieve privilege escalation or lateral movement depending on network configuration and patch level.