CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-58127 — PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via ...

·Source: NIST NVD

Updated:

Executive Summary

PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshalling technique and implementing .NET WebClient class methods, an unauthenticated remote attacker can read and write arbitrary files on the hos

Analysis

PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshalling technique and implementing .NET WebClient class methods, an unauthenticated remote attacker can read and write arbitrary files on the host filesystem. The ObjectURIs are identical across all installations by default. Chaining the arbitrary file write primitive with DLL hijacking opportunities in the MediaWriter service (which runs as NT Authority\\SYSTEM and loads missing DLLs such as CRYPTBASE.DLL from the application directory) enables unauthenticated remote code execution as SYSTEM upon service restart. CVSS Score: 9.8. Published: 2026-07-01T16:16:51.417.

Indicators of Compromise (1)

CVE (1)
CVE-2026-58127
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 1, 2026. Verified by: NIST.

Related Threats

LOWVulnerabilityNEW

Azure Password-Spraying Attack Bypasses MFA Defenses

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/azure-password-spraying-attack-bypasses-some-mfa-defenses-image_small-4-a-32128.jpg" align=right hspace=4><b>Threat Actor Uses Deprecated OAuth 2.0 Authentication Flow</b><br>Attackers behind a password-spraying campaign targeting Microsoft Office 365 accounts have amassed dozens of victims by abusing a deprecated feature in OAuth

Bank Info Security
LOWVulnerabilityNEW

CVE-2026-13769 – Insecure file permissions in AWS CLI

<p><b>Bulletin ID:</b> 2026-049-AWS<br> <b>Scope:</b> AWS<br> <b>Content Type:</b> Important (requires attention)<br> <b>Publication Date:</b> 07/01/2026 11:45 AM PDT</p> <p><b>Description:</b></p> <p>The AWS Command Line Interface (AWS CLI) is a unified tool for managing AWS services from the command line. We identified CVE-2026-13769 in AWS CLI on Unix-like systems where the umask has not been c

CVE-2026-13769
AWS Security Bulletins
MEDIUMVulnerability

Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings

Microsoft's new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and control over automated participants in sensitive meetings. The post Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings appeared first on SecurityWeek .

SecurityWeek