{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://database.harborguard.co/cve/CVE-2026-58127/vex.json","author":"HarborGuard Database","role":"Document Creator","timestamp":"2026-07-01T17:25:29.591Z","version":1,"tooling":"HarborGuard Database (https://database.harborguard.co)","statements":[{"vulnerability":{"name":"CVE-2026-58127","@id":"https://www.cve.org/CVERecord?id=CVE-2026-58127","description":"PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMediaServerEngine.dll, registered with ObjectURIs RemoteObj and UIRemoteObj, without any authentication requirement. By exploiting the MarshalByRefObject object unmarshalling technique and implementing .NET WebClient class methods, an unauthenticated remote attacker can read and write arbitrary files on the host filesystem. The ObjectURIs are identical across all installations by default. Chaining the arbitra"},"products":[{"@id":"cpe:2.3:a:hyland:pacsgear_mediawriter:5.2.1:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:hyland:pacsgear_mediawriter:5.2.1:*:*:*:*:*:*:*"}}],"status":"affected","action_statement":"No fixed version is published yet; monitor the upstream advisory.","timestamp":"2026-07-01T17:25:29.591Z"}]}