Unauthenticated Deserialization Vulnerability in RBH Access Technologies Integra32 Security Management System
CVE-2026-63079

9.3CRITICAL

Key Information:

Vendor: Rbh Access Technologies
Status: Integra32 Security Management System
Vendor: CVE Published:; 13 November 2026

🔔 Create Rbh Access Technologies Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-63079?

The Integra32 Security Management System version 5.1.11 R5.0 is susceptible to an unauthenticated deserialization flaw within its deprecated .NET Remoting service. This vulnerability is exposed through TCP port 2001 via the AxcvcLt.dll library. Attackers can exploit this by sending specially crafted serialized data to the IntegraURI object endpoint. Successful exploitation allows remote attackers to execute arbitrary code, potentially gaining NT AUTHORITY\SYSTEM privileges, leading to complete compromise of the host system.

Affected Version(s)

Integra32 Security Management System 5.1.11 R5.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-63079 - Proof of Concept