CVE-2026-25550

Name of the Vulnerable Software and Affected Versions BarTender 2010 BarTender 2016 versions prior to R10 BarTender 2019 versions prior to R11

Description An unauthenticated remote code execution issue exists in the .NET Remoting service exposed on TCP port 7375 via BtSystem.Service.exe. The service registers unauthenticated singleton endpoints, specifically 'BarTenderSystem' for versions 2016 and earlier, and 'DataServiceSingleton' for version 2019, which are configured with BinaryServerFormatterSinkProvider and TypeFilterLevel set to Full. A remote attacker can exploit .NET Remoting object unmarshalling to read or write arbitrary files on the server using the .NET WebClient class. Additionally, an attacker can coerce NTLMv2 authentication by providing a UNC path to a controlled server, potentially leading to sensitive credential disclosure, remote code execution, or lateral movement. The service operates under the context of NT AUTHORITYSYSTEM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.