CVE-2026-23751 - Vulnerability Analysis

Overview

Kofax Capture (Tungsten Capture) 6.0.0.0 contains a .NET Remoting unauthenticated object unmarshalling vulnerability in Ascent Capture Service on port 2424, letting remote attackers read/write files, disclose credentials, cause DoS, or execute code remotely.

Severity & Score

Impact

Remote attackers can read/write files, disclose credentials, cause denial of service, or execute code remotely, potentially compromising the entire system and network.

Mitigation

Update to the latest version of Kofax Capture (Tungsten Capture) that addresses this vulnerability.

References

• https://www.vulncheck.com/advisories/kofax-capture-unauthenticated-file-read-write-smb-coercion-via-net-remoting
• https://docshield.tungstenautomation.com/Portal/Products/en_US/KC/11.1.0-40hy9nfk91/KC.htm
• https://gist.github.com/VAMorales/3888941d6e5efdd4b2e673e999f68ca2

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner