CVE-2026-63079

CRITICAL 9.8

RBH Integra32 5.1.11 .NET Remoting Deserialization RCE

CVSS Score

9.8

EPSS Score

0.0%

EPSS Percentile

0th

RBH Access Technologies Integra32 Security Management System 5.1.11 R5.0 contains an unauthenticated deserialization vulnerability in its deprecated .NET Remoting service, exposed on TCP port 2001 via the AxcvcLt.dll library using BinaryServerFormatterSinkProvider at TypeFilterLevel.Full without requiring authentication. A remote unauthenticated attacker can send a malicious serialized gadget payload (such as a ysoserial.net TypeConfuseDelegate chain) to the IntegraURI object endpoint, or exploit MarshalByRefObject/MarshalByValue unmarshalling for arbitrary file read/write and SMB/NTLMv2 credential coercion, to achieve remote code execution as NT AUTHORITY\SYSTEM and fully compromise the host.

CWE	CWE-502
Vendor	rbh access technologies
Product	integra32 security management system
Published	Nov 13, 2026
Last Updated	Nov 13, 2026

Stay Ahead of the Next One

Get instant alerts for rbh access technologies integra32 security management system

Be the first to know when new critical vulnerabilities affecting rbh access technologies integra32 security management system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

RBH Access Technologies / Integra32 Security Management System

5.1.11 R5.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

gist.github.com: https://gist.github.com/VAMorales/b981c0062a9a7e8942439f97246669b6 rbh-access.com: https://rbh-access.com/software/integra32/ vulncheck.com: https://www.vulncheck.com/advisories/rbh-integra32-net-remoting-deserialization-rce

Credits

Victor A. Morales, Senior Pentester Team Leader, GM Sectec, Corp.