What is CVE-2026-6421?

CVE-2026-6421 is a high-severity vulnerability in Mobatek Mobaxterm Home Edition, classified under Untrusted Search Path. CVSS score: 7.0/10. Published 2026-04-17.

How severe is CVE-2026-6421?

High severity. CVSS v3 base score is 7.0 out of 10.

Is CVE-2026-6421 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Mobatek Mobaxterm Home Edition

CVE-2026-6421

A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 26.2 is able to mitigate this issue. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Published 2026-04-17 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.002 (4.2th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 4th percentile — 4.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000

Affected products

Mobatek Mobaxterm Home Edition — versions 26.0, 26.1, 26.2

Weakness classification (CWE)

Public proof-of-concept exploits

1neptune/chimera

References

vuldb.com/vuln/358020 (vdb-entry)
vuldb.com/vuln/358020/cti (signature, permissions-required)
vuldb.com/submit/778851 (third-party-advisory)
drive.google.com/file/d/17bbNDzfoD3NNPlUMkSYs8bVzVbbwddnU/view (exploit)
mobaxterm.mobatek.net/download-home-edition.html (related)
download.mobatek.net/2622026032581854/MobaXterm_Installer_v26.2.zip (patch)

Frequently asked questions

What is CVE-2026-6421?: CVE-2026-6421 is a high-severity vulnerability in Mobatek Mobaxterm Home Edition, classified under Untrusted Search Path. CVSS score: 7.0/10. Published 2026-04-17.
How severe is CVE-2026-6421?: High severity. CVSS v3 base score is 7.0 out of 10.
Is CVE-2026-6421 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.