A vulnerability marked as problematic has been reported in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search path.
This vulnerability is traded as CVE-2026-6421. An attack has to be approached locally. Furthermore, there is an exploit available.
It is suggested to upgrade the affected component.
The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
