Approved changes feed: RSS · Atom
cpe:2.3:a:mobatek:mobaxterm:*:*:*:*:home:*:*:*
part: a version: * update: *
| Vendor | Mobatek (69a89f3b-52d9-57bd-bc5b-e4b587a6db48) |
|---|---|
| Product | Mobaxterm (1389dd25-7ab9-5436-a149-68b92f43d424) |
| Edition | * |
| Language | * |
| Software edition | home |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25866 |
vulnerable | 2026-06-08 07:53:20.548740 |
MobaXterm < 26.1 Notepad++ Unquoted Service Path
HIGH (7.8)
MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability. The application calls WinExec to execute Notepad++ without a fully qualified executable path when opening remote files. An attacker can exploit the search path behavior by placing a malicious executable earlier in the search order, resulting in arbitrary code execution in the context of the affected user.
Published: 2026-03-09T15:24:47.658Z
Updated: 2026-03-11T13:57:44.185Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28847 |
vulnerable | 2026-06-08 05:31:25.094082 |
Details available
MobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls.
Published: 2021-06-03T10:58:16.000Z
Updated: 2024-08-03T21:55:11.897Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.