Threats tagged 'ghsa-8jpv-7gww-9r9j'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.0	CVE-2026-39907Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint High7.02026-04-15GCVE DatabaseCVE-2026-39907 Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 have an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths. This allows remote attackers to submit crafted requests that trigger outbound SMB connections, leaking NTLMv2 machine-account hashes. These leaked credentials can be used for privilege escalation or lateral movement within the network. Report on CVE-2026-39907 Vulnerability CWE-73 #ghsa-8jpv-7gww-9r9j	GCVE Database	2026-04-15

Page 1 of 1