Skip to content
OpenAdvisories

Product · Mobatek

MobaXterm

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-112161

    Lack of integrity checks in Mobatek’s MobaXterm

    MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious librar…

    Mobatek MobaXterm
  • High 7.8
    CVE-2026-25866

    MobaXterm < 26.1 Notepad++ Unquoted Service Path

    MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable path when opening remote files. An attacker can exploit the search path behavio…

    Mobatek MobaXterm