Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
MobaXterm Home Edition: Uncontrolled Search Path Leads to Local Attack
CVE-2026-6421
Summary
A security issue in MobaXterm Home Edition versions up to 26.1 could allow an attacker to gain unauthorized access to your system. This is a local attack, meaning it requires physical access to your computer. To protect yourself, update to version 26.2 or later, which fixes this issue. The vendor has already released a patch and responded promptly to the issue.
Original title
A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search path. An attack h...
Original description
A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 26.2 is able to mitigate this issue. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
nvd CVSS2.0
6.0
nvd CVSS3.1
7.0
nvd CVSS4.0
7.3
Vulnerability type
CWE-426
CWE-427
Uncontrolled Search Path Element
Published: 17 Apr 2026 · Updated: 17 Apr 2026 · First seen: 17 Apr 2026