CVE-2026-26222

CRITICAL 9.8CVE-2026-26222 · Published 24/02/2026 · updated 17/06/2026

In short

CVE-2026-26222 is a CRITICAL (CVSS 9.8) vulnerability affecting altec doclink (beyond).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
altec doclink beyond	`= 4.0.336.0`	No fix yet

Description

Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and is vulnerable to unsafe object unmarshalling, allowing remote attackers to read arbitrary files from the underlying system by specifying local file paths. Additionally, attackers can coerce SMB authentication via UNC paths and write arbitrary files to server locations. Because writable paths may be web-accessible under IIS, this can result in unauthenticated remote code execution or denial of service through file overwrite.

References

doclinkai.com · Product
vulncheck.com/advisories/doclink-net-remoting-unauthenticated-arbitrary-file-read-write-rce · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free