Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2 machine-account hashes. Attackers can submit crafted SOAP requests with UNC paths to force the server to initiate outbound SMB connections, exposing authentication credentials that may be relayed for privilege escalation or lateral movement within the network.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-15 | 2 | Disclosure2 |
| 2026-05-12 | 5 | Disclosure4General1 |
Unpopular opinion: The cybersecurity industry is selling you dashboards. CRITICAL: CVE-2026-39907 (CVSS 10) — unisys webperfect image suite
Post summary
A new critical vulnerability with CVSS 10 (CVE-2026-39907) affecting Unisys WebPerfect Image Suite has been announced.
CVSS 10 CRITICAL · CVE-2026-39907 · 3.0.3960.22810 → 3.0.3960.22604 CRITICAL: CVE-2026-39907 (CVSS 10) — unisys webperfect image suite
Post summary
The text announces a critical vulnerability (CVE‑2026‑39907) affecting Unisys WebPerfect Image Suite, listing its CVSS score and affected version ranges, but provides no proof of exploitation or mitigation advice.
CVE: CVE-2026-39907 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory CRITICAL: CVE-2026-39907 (CVSS 10) — unisys webperfect image suite
Post summary
A new critical vulnerability (CVE‑2026‑39907) for Unisys WebPerfect Image Suite has been disclosed, boasting a CVSS‑3.1 score of 10 and a critical severity rating.
CRITICAL: CVE-2026-39907 (CVSS 10) — unisys webperfect image suite Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName…
Post summary
A critical vulnerability (CVSS 10) in Unisys WebPerfect Image Suite is disclosed, describing an unauthenticated SOAP endpoint that accepts unsanitized file paths.
https://lyrie.ai/research/research/cve-2026-39907-unisys-webperfect-image-suite #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The snippet merely links to a research article and includes generic hashtags, providing no substantive details about the CVE, its exploitation status, or remediation.
CVE-2026-39907 Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file pa… https://www.cve.org/CVERecord?id=CVE-2026-39907
Post summary
CVE-2026-39907 discloses an unauthenticated WCF SOAP endpoint on Unisys WebPerfect Image Suite that accepts unsanitized file parts, indicating a potential remote exploitation vector.
CVE-2026-39907 Unauthenticated NTLMv2 Hash Leakage via WCF SOAP Endpoint in Unisys WebPerfect Image Suite https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39907
Post summary
The post announces CVE‑2026‑39907, detailing unauthenticated NTLMv2 hash leakage through a WCF SOAP endpoint in Unisys WebPerfect Image Suite, with no mention of PoC, exploit tools, or active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | unisys | webperfect_image_suite | 3.0.3960.22604 | - | - |
| App | unisys | webperfect_image_suite | 3.0.3960.22810 | - | - |