CVE-2026-11967 | Mobatek MobaXterm Personal Edition up to 26.3 DLL winspool.drv uncontrolled search path

A vulnerability, which was classified as problematic, was found in Mobatek MobaXterm Personal Edition up to 26.3. This vulnerability affects unknown code in the library winspool.drv of the component DLL Handler. Executing a manipulation can lead to uncontrolled search path.

This vulnerability is tracked as CVE-2026-11967. The attack is restricted to local execution. No exploit exists.

You should upgrade the affected component.