CVE-2026-112161

MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can replace the ‘bin/cygwin1.dll’ library contained within it with a malicious library. When the victim opens a Local Shell session or uses a Cygwin-based function, the application extracts the component and loads the tampered library, executing code with the victim’s permissions. Exploitation requires write access to the plugin and does not, in itself, involve privilege escalation.

• CWE-345

• https://www.incibe.es/en/incibe-cert/notices/aviso/lack-integrity-checks-mobateks-mobaxterm

Published

Oct 19, 2026

Last Modified

Oct 20, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-112152A security vulnerability has been detected in vraj404 Crimin…7.3
• CVE-2026-112153A vulnerability was detected in vraj404 Criminal-Management-…7.3
• CVE-2026-112157A weakness has been identified in MemTensor memmy-agent up t…3.1
• CVE-2026-112158A weakness has been identified in MikroTik RouterOS up to 6.…6.5
• CVE-2026-112159A security vulnerability has been detected in JumpServer up …5.5
• CVE-2026-11216Incorrect security UI in File Input in Google Chrome prior t…4.3
• CVE-2026-11217Inappropriate implementation in Fenced Frames in Google Chro…6.5
• CVE-2026-112177A flaw was found in Ghostscript as shipped with Red Hat Ente…7.3
• CVE-2026-112178MISP contains an access control flaw in the proposal (shadow…7.1
• CVE-2026-112179In MISP, the event synchronization process contained a logic…5.3
• CVE-2026-11218Inappropriate implementation in PlatformIntegration in Googl…6.8
• CVE-2026-112180MISP contains a data integrity flaw in its event deletion lo…5.1