MobaXterm vulnerabilities

CVEs whose affected-version data names the MobaXterm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112161High· 8.5

today

Lack of integrity checks in Mobatek’s MobaXterm

MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it w…

▾ TwilightMobatek · MobaXtermvia CVEORG