PT-2026-32937 · Unisys · Webperfect Image Suite

Vulncheck · Published 2026-04-14 · Updated 2026-05-06 · CVE-2026-39906

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Unisys WebPerfect Image Suite version 3.0.3960.22810 Unisys WebPerfect Image Suite version 3.0.3960.22604

Description An exposed deprecated .NET Remoting TCP channel allows remote unauthenticated attackers to leak NTLMv2 machine-account hashes. This is achieved by supplying a Windows UNC path as a target file argument through object-unmarshalling techniques. Attackers can capture the leaked NTLMv2 hash and relay it to other hosts to achieve privilege escalation or lateral movement, depending on network configuration and patch level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Weakness Enumeration

CWE-441

Related Identifiers

CVE-2026-39906

Affected Products

Webperfect Image Suite

References · 7

• 🔥 https://gist.github.com/VAMorales/be3e4ed472c51794493c1256cce16129 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-39906 · Security Note
• https://unisys.com/solutions/cai/applications · Note
• https://vulncheck.com/advisories/unisys-webperfect-image-suite-ntlmv2-hash-leakage-via-net-remoting · Note
• https://t.me/cveNotify/162368 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2044287621803704408 · Twitter Post
• https://twitter.com/CVEnew/status/2044338924458545210 · Twitter Post