A vulnerability, which was classified as problematic, was found in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in the library version.dll of the component Service. The manipulation results in uncontrolled search path.
This vulnerability was named CVE-2026-4962. The attack needs to be approached locally. In addition, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
