THREAT OPS › Threat News › Security advisory: Pre-authentication RCE (BinaryFormatter deserialization) in Cinegy Cinegize 2026-02-05 installer (Cinegy GmbH)
Security advisory: Pre-authentication RCE (BinaryFormatter deserialization) in Cinegy Cinegize 2026-02-05 installer (Cinegy GmbH)
<p>Posted by disclosure via Fulldisclosure on Aug 17</p>0day Rubbish Research Team is publicly disclosing a vulnerability in Cinegy Cinegize 2026-02-05 installer (Cinegy <br /> GmbH). The research is published and a proof-of-concept is available.<br /> <br /> Pre-authentication RCE (BinaryFormatter deserialization) (CVSS 9.8, pre-authentication)<br /> <br /> Cinegy Cinegize (2026-02-05 installer)
MITRE ATT&CK techniques
- Windows ServiceT1543.003
Original source: https://seclists.org/fulldisclosure/2026/Aug/60