Cyber Posture

CVE-2026-39907

CriticalPublic PoC

Published: 14 April 2026

Published
14 April 2026
Modified
06 May 2026
KEV Added
—
Patch
—
CVSS Score 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS Score 0.0054 67.6th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Description

Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2 machine-account…

more

hashes. Attackers can submit crafted SOAP requests with UNC paths to force the server to initiate outbound SMB connections, exposing authentication credentials that may be relayed for privilege escalation or lateral movement within the network.

Likely Mitigating ControlsAI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SI-10 Information Input Validation
addresses: CWE-73

Rejects externally supplied file or resource identifiers that fail validity checks.

Security SummaryAI

Automated synthesis unavailable for this CVE.

Details

CWE(s)
CWE-73

Affected Products

unisys
webperfect image suite
3.0.3960.22604, 3.0.3960.22810

References