PT-2026-24077 · Mobaxterm+1 · Mobaxterm+1

Vulncheck · Published 2026-03-09 · Updated 2026-05-13 · CVE-2026-25866

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MobaXterm versions prior to 26.1

Description The software contains an uncontrolled search path element issue. The application uses WinExec to launch Notepad++ without specifying the complete path to the executable when opening files from remote locations. An attacker could leverage this behavior by placing a malicious executable earlier in the system's search path, potentially leading to arbitrary code execution with the privileges of the user.

Recommendations Update to version 26.1 or later.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2026-25866

Affected Products

Mobaxterm

Notepad++

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-25866 · Security Note
• https://twitter.com/CVEnew/status/2031122528899338485 · Twitter Post
• https://t.me/cveNotify/162344 · Telegram Post
• https://mobaxterm.mobatek.net/download-home-edition.html · Patch, Vendor Advisory
• https://twitter.com/spektion/status/2054592743041618036 · Twitter Post
• https://t.me/CVEtracker/46922 · Telegram Post
• https://vulncheck.com/advisories/mobaxterm-notepad-unquoted-service-path · Note