CVE-2026-58126: PACSgear PACS Scan 5.2.1 Unauthenticated RCE via .NET Remoting TCP Service
PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability that allows remote attackers to read and write arbitrary files by exploiting an exposed .NET Remoting TCP service on port 22222 via PGImageExchQueue.exe without any authentication requirement. Attackers can chain the arbitrary file write primitive with DLL hijacking in PGImageExchangeQueueSvc.exe, which loads missing DLLs such as CRYPTSP.DLL from the application directory, to achieve remote code execution as NT Authority\SYSTEM upon service restart.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-58126?
CVE-2026-58126 is classified as critical with a severity score of 9.3.
What type of vulnerability is CVE-2026-58126?
CVE-2026-58126 is an unauthenticated remote code execution vulnerability.
How can CVE-2026-58126 be exploited?
CVE-2026-58126 can be exploited via an exposed .NET Remoting TCP service on port 22222, allowing attackers to read and write arbitrary files.
What software is affected by CVE-2026-58126?
CVE-2026-58126 affects PACSgear PACS Scan version 5.2.1.
How do I mitigate CVE-2026-58126?
To mitigate CVE-2026-58126, it is recommended to disable the exposed .NET Remoting TCP service or apply relevant security patches provided by the vendor.