Skip to content
OpenAdvisories

Vendor

uvnc

14 known vulnerabilities.

Products

UltraVNC 10 PCHelpWareV2 2 UltraVNC Viewer 1 UltraVNC Launcher 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-7840

    UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE)

    UltraVNC repeater through 1.8.2.2 contains a global buffer overflow in its embedded HTTP administration server. The functions wi_senderr() and wi_replyhdr() in repeater/webgui/webutils.c write the caller-supplied HTTP request URI into a fixed 1000-byte global…

    uvnc UltraVNC
  • Critical 9.1
    CVE-2026-7839

    UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access

    UltraVNC repeater through 1.8.2.2 initializes the HTTP administration server with a hardcoded default password. In repeater/webgui/settings.c:197, when settings2.txt is absent on first run the repeater writes the literal string "adminadmi2" as the admin passw…

    uvnc UltraVNC