CVE-2026-23751 - Vulnerability Analysis

Overview

Kofax Capture (Tungsten Capture) 6.0.0.0 contains a .NET Remoting unauthenticated object unmarshalling vulnerability in Ascent Capture Service on port 2424, letting remote attackers read/write files, disclose credentials, cause DoS, or execute code remotely.

Severity & Score

Impact

Remote attackers can read/write files, disclose credentials, cause denial of service, or execute code remotely, potentially compromising the entire system and network.

Mitigation

Update to the latest version of Kofax Capture (Tungsten Capture) that addresses this vulnerability.

References

• https://www.vulncheck.com/advisories/kofax-capture-unauthenticated-file-read-write-smb-coercion-via-net-remoting
• https://docshield.tungstenautomation.com/Portal/Products/en_US/KC/11.1.0-40hy9nfk91/KC.htm
• https://gist.github.com/VAMorales/3888941d6e5efdd4b2e673e999f68ca2

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 23, 2026

🔴 CVE-2026-23751 - Critical (9.8) Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via the Ascent Capture Service that is accessible without authentication and uses a d... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23751/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner