Mobaxterm Personal Edition Portable
Approved changes feed: RSS · Atom
cpe:2.3:a:mobatek:mobaxterm_personal_edition_portable_:26.3:*:*:*:*:*:*:*
part: a version: 26.3 update: *
| Vendor | Mobatek (69a89f3b-52d9-57bd-bc5b-e4b587a6db48) |
|---|---|
| Product | Mobaxterm Personal Edition Portable (0e89e4da-765a-5860-b164-17101b9e1476) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11967 |
vulnerable | 2026-07-29 00:23:31.836507 |
Arbitrary code execution in MobaXterm Personal Edition (Portable)
MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. Because the application automatically loads the winspool.drv library from that location during startup, an attacker with local access can place a specially crafted DLL alongside the executable to be executed when the victim launches the application.
Published: 2026-06-12T13:30:10.610Z
Updated: 2026-06-12T14:01:05.844Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11879 |
vulnerable | 2026-07-29 00:23:31.755892 |
Arbitrary code execution in MobaXterm Personal Edition (Portable)
MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading malicious DLLs from a temporary directory that is predictable and can be modified by the user. During startup, the application searches for specific DLLs in this location before resorting to the system’s secure paths, enabling an attacker with local access to place a specially crafted DLL to be executed automatically when the victim launches the application.
Published: 2026-06-12T13:29:41.921Z
Updated: 2026-06-12T14:00:36.218Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.