CVE-2026-11857

Name of the Vulnerable Software and Affected Versions Quanos SCHEMA ST4 on-premises (affected versions not specified)

Description The Client Update Service contains a local privilege escalation issue caused by insecure deserialization within the .NET Remoting service. The service uses TypeFilterLevel.Full and is bound to local interfaces via named pipes. A local authenticated attacker can connect to the named pipe, access the .NET Remoting endpoint, and transmit specially crafted serialized objects. This allows for arbitrary code execution with NT AUTHORITYSYSTEM privileges. This issue requires a local authenticated user session and cannot be exploited over a network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.