Mobatek Mobaxterm vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Mobatek Mobaxterm: 2 record(s), with affected versions and fixes.
cpe:2.3:a:mobatek:mobaxterm

CVE-2019-25741 Critical · 9.8 CWE-120 Jun 4, 2026

Mobatek MobaXterm 12.1 Buffer Overflow via Sessions File

Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of session files that allows remote attackers to execute arbitrary code. Attackers can craft a malicious MobaXterm sessions file with overflow data that triggers the vulnerability when imported and executed, enabling reverse shell execution with user privileges.

CVE-2026-25866 High · 7.8 CWE-428 Mar 9, 2026

MobaXterm < 26.1 Notepad++ Unquoted Service Path

MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable path when opening remote files. An attacker can exploit the search path behavior by placing a malicious executable earlier in the search order, resulting in arbitrary code execution in the context of the affected user.