Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows remote attackers to read and write arbitrary files by exploiting an exposed .NET Remoting TCP service on port 22222 via PGImageExchQueue.exe without any authentication requirement. Attackers can chain the arbitrary file write primitive with DLL hijacking in PGImageExchangeQueueSvc.exe, which loads missing DLLs such as CRYPTSP.DLL from the application directory, to achieve remote code execution as NT Authority\SYSTEM upon service restart.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-01 | 1 | Disclosure1 |
| 2026-07-02 | 1 | PoC1 |
| 2026-07-10 | 1 | General1 |
| 2026-07-11 | 3 | Disclosure2General1 |
| 2026-07-12 | 2 | General2 |
| 2026-07-15 | 1 | General1 |
| 2026-07-17 | 1 | Disclosure1 |
【緊急】CVE-2026-58126 PACSgear PACS Scan 5.2.1に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/09/cve-2026-58126-pacsgear-pacs-scan-521/ #IT #Security #cybersecurity
Post summary
An urgent notice alerts that PACSgear PACS Scan 5.2.1 suffers from a severe vulnerability (CVE‑2026‑58126) and calls for immediate action, but offers no technical details or evidence of exploitation.
【緊急】CVE-2026-58126 PACSgear PACS Scan 5.2.1に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/09/cve-2026-58126-pacsgear-pacs-scan-521/ #IT #Security #cybersecurity
Post summary
The post alerts to a serious vulnerability (CVE-2026-58126) in PACSgear PACS Scan 5.2.1 and urges immediate action, but provides no technical details, PoC, or patch information.
【3軸解説】「Hyland Software Inc.のPACSgearにおける複数の脆弱性（CVE-2026-58126）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The tweet introduces a discussion of CVE‑2026‑58126 but provides no technical details, exploit evidence, or mitigation information.
もし自分の現場で「Hyland Software Inc.のPACSgearにおける複数の脆弱性（CVE-2026-58126）」が起きたら、最初の一手は何ですか? →背景/目的/効果の3軸でfirst-stepを整理しました。 #セキュリティ #インシデント対応 ▶ 無料トレーニング: https://www.intect-i.jp/training/free/?utm_source=sns&utm_medium=social&utm_campaign=free_training
Post summary
The post only poses a general incident‑response question about CVE-2026-58126, lacking specific technical, exploit, or patch information.
「Hyland Software Inc.のPACSgearにおける複数の脆弱性（CVE-2026-58126）」をボードに上げるなら1ページでどう書く? 背景/目的/効果の3軸で要約しました。 #セキュリティ #経営報告 ▶ 無料プログラム: https://www.intect-i.jp/local-program/?utm_source=sns&utm_medium=social&utm_campaign=local_program
Post summary
The post references a CVE but offers no additional details, PoC, exploit, or mitigation information.
【3軸解説】「Hyland Software Inc.のPACSgearにおける複数の脆弱性（CVE-2026-58126）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキュリティ #若手コンサル ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post introduces an article that analyzes Hyland’s PACSgear vulnerability (CVE‑2026‑58126) by outlining its background, purpose, and effect, but it does not provide technical details, PoC, or exploitation evidence.
【緊急】CVE-2026-58126 PACSgear PACS Scan 5.2.1に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/09/cve-2026-58126-pacsgear-pacs-scan-521/ #IT #Security #cybersecurity
Post summary
The post alerts to a severe vulnerability (CVE‑2026‑58126) in PACSgear PACS Scan 5.2.1 and urges immediate action, but offers no further technical detail, PoC, or patch information.
【緊急】CVE-2026-58126 PACSgear PACS Scan 5.2.1に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/09/cve-2026-58126-pacsgear-pacs-scan-521/ #IT #Security #cybersecurity
Post summary
Urgent notice that CVE-2026-58126 affects PACSgear PACS Scan 5.2.1, highlighting the need for immediate action, but no further technical details or remedial steps are provided.
CVE-2026-58126 Hyland PACSgear PACS Scan Unauthenticated remoting could allow file read/write and remote code execution through a DLL-hijacking chain Full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-07-01/TIER_2_CVE-2026-58126.md #CyberSecurity #HealthcareCybersecurity #VulnerabilityManagement
Post summary
The post announces CVE-2026-58126 with technical details and references a GitHub analysis that likely contains a proof‑of‑concept. No exploitation, patch, or active usage claims are made.
🚨 CRITICAL - Unauthenticated .NET Remoting RCE in PACSgear PACS Scan (CVE-2026-58126) PACSgear PACS Scan 5.2.1 exposes a .NET Remoting TCP service on port 22222 used by PGImageExchQueue.exe that allows unauthenticated arbitrary file read/write. The root issue is insecure exposed remoting endpoints and improper authentication/access control, enabling arbitrary file operations that can be chained into code execution. An attacker can reach the service remotely with no credentials, write a malicious DLL into the application directory, and trigger DLL hijacking in PGImageExchangeQueueSvc.exe (e.g., CRYPTSP.DLL) after forcing or waiting for a service restart. Successful exploitation yields full remote code execution as NT AUTHORITY\SYSTEM and can enable complete host takeover, lateral movement, and data theft in clinical imaging environments. 👉 Affected: PACSgear PACS Scan 5.2.1 | Upgrade to No fix yet - treat as suspicious
Post summary
The post announces a critical unauthenticated RCE in PACSgear PACS Scan, detailing the attack vector and impact, but no PoC, exploit tool, or active exploitation evidence. The patch status is noted as pending, underscoring the need for mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hyland | pacsgear | - | - | - |