CVE detail
CVE-2026-6421
A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 26.2 is able to mitigate this issue. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- https://vuldb.com/vuln/358020/ctivuldb.com
No excerpt available.
Exploitvuldb.comApr 17, 2026, 6:16 AM - https://vuldb.com/vuln/358020vuldb.com
No excerpt available.
Exploitvuldb.comApr 17, 2026, 6:16 AM - https://vuldb.com/submit/778851vuldb.com
No excerpt available.
Exploitvuldb.comApr 17, 2026, 6:16 AM - https://mobaxterm.mobatek.net/download-home-edition.htmlmobaxterm.mobatek.net
No excerpt available.
Vendor Advisorymobaxterm.mobatek.netApr 17, 2026, 6:16 AM No excerpt available.
Exploitdrive.google.comApr 17, 2026, 6:16 AM- https://download.mobatek.net/2622026032581854/MobaXterm_Installer_v26.2.zipdownload.mobatek.net
No excerpt available.
referencedownload.mobatek.netApr 17, 2026, 6:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-15515CVSS 6.4 · Medium
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the component QMUDisk D…
- CVE-2026-4962CVSS 6.4 · Medium
A security flaw has been discovered in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in the library version.dll of the component Service. The manipu…
- CVE-2026-4546CVSS 7.3 · High
A weakness has been identified in Flos Freeware Notepad2 4.2.25. This impacts an unknown function in the library TextShaping.dll. Executing a manipulation can lead to uncontrolled…
- CVE-2026-4545CVSS 7.3 · High
A security flaw has been discovered in Flos Freeware Notepad2 4.2.25. This affects an unknown function in the library PROPSYS.dll. Performing a manipulation results in uncontrolle…
- CVE-2026-33156CVSS 7.8 · High
ScreenToGif is a screen recording tool. In versions from 2.42.1 and prior, ScreenToGif is vulnerable to DLL sideloading via version.dll . When the portable executable is run from…
- CVE-2026-3787CVSS 6.4 · Medium
A weakness has been identified in UltraVNC 1.6.4.0 on Windows. This affects an unknown function in the library cryptbase.dll of the component Windows Service. This manipulation ca…