Skip to content
OpenAdvisories

Vendor

Unisys

2 known vulnerabilities.

Products

WebPerfect Image Suite 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-39907

    Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP

    Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB co…

    Unisys WebPerfect Image Suite
  • High 7.0
    CVE-2026-39906

    Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting

    Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting TCP channel that allows remote unauthenticated attackers to leak NTLMv2 machine-account hashes by supplying a Windows UNC path as a target file argument…

    Unisys WebPerfect Image Suite