PT-2026-48863 · Mobatek · Mobaxterm
CVE-2026-11879
·
Published
2026-06-12
·
Updated
2026-06-13
CVSS v4.0
8.5
High
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
MobaXterm Personal Edition (Portable) version 26.3 (Build 5154)
Description
The application allows arbitrary code execution by loading malicious DLLs from a predictable temporary directory that can be modified by the user. During startup, the software searches for specific DLLs in this location before checking the system's secure paths. This allows an attacker with local access to place a specially crafted DLL that will be executed automatically when the application is launched.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Uncontrolled Search Path Element
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mobaxterm