What is CVE-2026-25551?

CVE-2026-25551 is a high-severity vulnerability in Seagull Software, Llc. Bartender 2021, classified under Deserialization of Untrusted Data. CVSS score: 7.8/10. Published 2026-06-04.

How severe is CVE-2026-25551?

High severity. CVSS v3 base score is 7.8 out of 10.

Deserialization in Seagull Software, Llc. Bartender 2021

CVE-2026-25551

Seagull Software BarTender 2021 R1 through 12.0.1 contains an insecure deserialization vulnerability that allows low-privileged local users to escalate privileges. The DataServiceSingleton .NET Remoting endpoint is bound to localhost on TC…

Vulnerability class: Insecure Deserialization

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Seagull Software, Llc. Bartender 2021 — versions R1

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

disclosure@vulncheck.com (technical-description, exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-25551?: CVE-2026-25551 is a high-severity vulnerability in Seagull Software, Llc. Bartender 2021, classified under Deserialization of Untrusted Data. CVSS score: 7.8/10. Published 2026-06-04.
How severe is CVE-2026-25551?: High severity. CVSS v3 base score is 7.8 out of 10.