EUVD-2026-36426

ID: EUVD-2026-36426

Severity: high

CVSS v4: 8.5 (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading a malicious DLL located in the same directory as the portable executable. Because the application automatically loads the winspool.drv library from that location during startup, an attacker with local access can place a specially crafted DLL alongside the executable to be executed when the victim launches the application.

Timestamps

Normalized: 2026-06-12T15:13:48Z UTC
Last updated: 2026-06-12T15:13:48Z UTC

References

No references provided.

VulnAI

EUVD-2026-36426

Description

Timestamps

References