WebPerfect Image Suite vulnerabilities

2 known vulnerabilities in WebPerfect Image Suite from Unisys. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  WebPerfect Image Suite: External Control of File Name or Path

  CVE-2026-39907Apr 14, 2026Unisys

  Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB con

• 10.0 Critical severity

  WebPerfect Image Suite: Unintended Proxy or Intermediary

  CVE-2026-39906Apr 14, 2026Unisys

  Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose a deprecated .NET Remoting TCP channel that allows remote unauthenticated attackers to leak NTLMv2 machine-account hashes by supplying a Windows UNC path as a target file argument