← All credits
Victor A. Morales, Senior Pentester Team Leader, GM Sectec, Corp.
22 vulnerability records and advisories credit this contributor.
CVE-2026-0611
Spacelabs Healthcare Sentinel 10.5.x < 11.6.0 Unauthenticated RCE via .NET Remoting
CVE-2026-26221
Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE
CVE-2026-39906
Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting
CVE-2026-23759
Perle IOLAN STS/SCS Authenticated Command Injection via 'shell ps'
CVE-2026-23746
Entrust Instant Financial Issuance (IFI) SmartCardController Service .NET Remoting RCE
CVE-2025-34414
Entrust Instant Financial Issuance (IFI) Legacy Remoting Service .NET Remoting RCE
CVE-2026-39907
Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP
CVE-2026-39920
BridgeHead FileStore < 24A Apache Axis2 Default Credentials RCE
CVE-2026-21665
The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 2021.2.4 (build 4.7.3155.0011) uses deprecated .NET Remoting TCP channels that allow unsafe deserialization of untrusted data. When these
CVE-2025-34350
UnForm Server < 10.1.15 Doc Flow Unauthenticated File Read