Vulnerabilidades do Mobatek Mobaxterm

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Mobatek Mobaxterm: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:mobatek:mobaxterm

CVE-2019-25741 Crítica · 9.8 CWE-120 04/06/2026

Mobatek MobaXterm 12.1 Buffer Overflow via Sessions File

Mobatek MobaXterm 12.1 contains a structured exception handling (SEH) based buffer overflow vulnerability in the username field of session files that allows remote attackers to execute arbitrary code. Attackers can craft a malicious MobaXterm sessions file with overflow data that triggers the vulnerability when imported and executed, enabling reverse shell execution with user privileges.

CVE-2026-25866 Alta · 7.8 CWE-428 09/03/2026

MobaXterm < 26.1 Notepad++ Unquoted Service Path

MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable path when opening remote files. An attacker can exploit the search path behavior by placing a malicious executable earlier in the search order, resulting in arbitrary code execution in the context of the affected user.