Posted by disclosure via Fulldisclosure on Aug 170day Rubbish Research Team is publicly disclosing a vulnerability in Cinegy Cinegize 2026-02-05 installer (Cinegy GmbH). The research is published and a proof-of-concept is available. Pre-authentication RCE (BinaryFormatter deserialization) (CVSS 9.8, pre-authentication) Cinegy Cinegize (2026-02-05 installer) registers a Windows service listening on TCP 51140 with a DotNetty pipeline that deserializes .NET BinaryFormatter objects before the...