Skip to content
OpenAdvisories
High · 7.0 Public exploit CVE-2026-6421 EUVD-2026-23374GHSA-hf75-j846-hmxr

Mobatek MobaXterm Home Edition msimg32.dll uncontrolled search path

Published Apr 17, 2026 · Updated Apr 17, 2026 · Assigned by VulDB

Vendor: Mobatek Product: MobaXterm Home Edition

Description

A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 26.2 is able to mitigate this issue. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Affected products

VendorProductAffectedFixed
Mobatek MobaXterm Home Edition 26.0, 26.1 26.2

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • 1neptune/chimera ★ 0 · Jul 6, 2026

    Rust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References