Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting TCP channel that allows remote unauthenticated attackers to leak NTLMv2 machine-account hashes by supplying a Windows UNC path as a target file argument through object-unmarshalling techniques. Attackers can capture the leaked NTLMv2 hash and relay it to other hosts to achieve privilege escalation or lateral movement depending on network configuration and patch level.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-15 | 2 | Disclosure1General1 |
| 2026-05-12 | 2 | General2 |
Unpopular opinion: The cybersecurity industry is selling you dashboards. CRITICAL: CVE-2026-39906 (CVSS 10) — unisys webperfect image suite
Post summary
The post simply announces a critical CVE (CVE-2026-39906) with CVSS score 10 for the UniSys WebPerfect Image Suite, without providing forensic details or mitigation advice.
https://lyrie.ai/research/research/cve-2026-39906-unisys-webperfect-image-suite #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The post merely references a CVE URL and relevant hashtags but provides no specific information about the vulnerability, its exploitation, or mitigation.
CVE-2026-39906 Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting TCP channel that allows remote unauthenticated attackers to… https://www.cve.org/CVERecord?id=CVE-2026-39906
Post summary
Announces CVE‑2026‑39906, highlighting a remote unauthenticated vulnerability in Unisys WebPerfect Image Suite caused by a deprecated .NET Remoting channel.
CVE-2026-39906 Remote NTLMv2 Hash Leakage in Unisys WebPerfect Image Suite 3.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39906 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post simply announces the existence of CVE-2026-39906 with a link to a notification, but provides no additional technical, exploit, or mitigation details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | unisys | webperfect_image_suite | 3.0.3960.22604 | - | - |
| App | unisys | webperfect_image_suite | 3.0.3960.22810 | - | - |