What is CVE-2026-26222?

CVE-2026-26222 is a critical-severity vulnerability in Beyond Altec Doclink, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2026-02-24.

How severe is CVE-2026-26222?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SSRF in Beyond Altec Doclink

CVE-2026-26222

Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap". The service does not require authentication and is vulnerable to unsafe object unmarshalling, allowing remote attackers to read arbitrary files from the underlying system by specifying local file paths. Additionally, attackers can coerce SMB authentication via UNC paths and write arbitrary files to server locations. Because writable paths may be web-accessible under IIS, this can result in unauthenticated remote code execution or denial of service through file overwrite.

Vulnerability class: Insecure Deserialization

EPSS: 0.007 (50.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Beyond Altec_doclink — versions 4.0.336.0
Beyond Limits Inc. Altec Doclink — versions 4.0.336.0

Weakness classification (CWE)

References

disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (VDB Entry, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2026-26222?: CVE-2026-26222 is a critical-severity vulnerability in Beyond Altec Doclink, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2026-02-24.
How severe is CVE-2026-26222?: Critical severity. CVSS v3 base score is 9.8 out of 10.