CVE-2026-23751 describes a critical vulnerability in Tungsten Capture 6.0.0.0 where the Ascent Capture Service exposes a deprecated .NET Remoting HTTP channel on port 2424 that lacks authentication and uses a default endpoint identifier. This allows unauthenticated attackers to perform .NET Remoting object unmarshalling attacks, enabling them to instantiate remote System.Net.WebClient objects. Exploitation can result in arbitrary file access on the server filesystem, writing attacker-controlled files, coercing NTLMv2 authentication to attacker-controlled hosts, and potentially achieving denial of service, remote code execution, or lateral movement depending on the service account privileges and network environment.

The vulnerability allows unauthenticated remote attackers to read and write arbitrary files on the affected server, potentially disclose sensitive credentials via NTLMv2 relay, cause denial of service, execute code remotely, or move laterally within the network. The severity is critical with a CVSS 4.0 base score of 9.3, reflecting the high impact and ease of exploitation without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to port 2424 on the affected server to trusted hosts only, disable the deprecated .NET Remoting HTTP channel if possible, and monitor for unusual activity related to this service. Do not expose the Ascent Capture Service to untrusted networks.