CVE-2026-63079
validatedZero produced an exploit or a check.GHSA-9wvh-rc97-46vq ↗EUVD-2026-125434 ↗
description
Integra32 Security Management System 5.1.11 R5.0 has an unsafe deserialization issue in its deprecated .NET Remoting service. An unauthenticated attacker able to connect to TCP port 2001 could execute code as SYSTEM and read or modify files on the affected host.
mitigation
Block untrusted access to TCP port 2001 and allow connections only from systems that require the service. Disable the deprecated .NET Remoting service where feasible, and seek a supported vendor update; no fixed release is recorded.
outcome
Contextual check: a technique exists and was validated, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-11-13 15:19Zcve_org: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/CVE-2026-63079
{ "etk_id": "ETK-2026-4399", "cve_id": "CVE-2026-63079", "display_id": "CVE-2026-63079", "ghsa_id": "GHSA-9wvh-rc97-46vq", "euvd_id": "EUVD-2026-125434", "status": "published", "anchor_state": "anchored", "title": "Unauthenticated deserialization in Integra32 Security Management System", "summary": "Integra32 Security Management System 5.1.11 R5.0 has an unsafe deserialization issue in its deprecated .NET Remoting service. An unauthenticated attacker able to connect to TCP port 2001 could execute code as SYSTEM and read or modify files on the affected host.", "mitigation": "Block untrusted access to TCP port 2001 and allow connections only from systems that require the service. Disable the deprecated .NET Remoting service where feasible, and seek a supported vendor update; no fixed release is recorded.", "vendor": "RBH Access Technologies", "product": "Integra32 Security Management System", "affected": [ { "affected_notes": [ "5.1.11 R5.0" ], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "Integra32 Security Management System", "purl": null } ], "cwes": [ 502 ], "cvss_score": 9.3, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": true, "check_confidence_basis": "assessed", "exploit": false, "pipeline_minutes": 9.090190566666667, "t0_at": "2026-11-13T15:19:20.082000+00:00", "signals": { "check": { "at": "2026-11-13T16:04:51.796762+00:00", "days": 0.03161706900462963, "is_lower_bound": false, "measured_at": "2026-11-13T15:19:20.082000+00:00", "url": null }, "trigger_signal": { "at": "2026-11-13T15:19:20.082000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-11-13T15:19:20.082000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-63079" } } }
published 2026-11-13 15:51Z
last change 2026-11-14 04:52Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.