CVE-2018-25426

HIGH 7.5CVE-2018-25426 · Published 30/05/2026 · updated 06/10/2026

In short

CVE-2018-25426 is a HIGH (CVSS 7.5) vulnerability affecting winmtr (winmtr).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 44.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
winmtr winmtr	`= 0.91`	No fix yet

Description

WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the application by sending a malformed payload file containing a large buffer of repeated characters. Attackers can create a specially crafted input file with 238 bytes of data to trigger a buffer overflow condition that causes the application to crash.

References

winmtr.net · Product
winmtr.net/winmtr_download · Exploit
exploit-db.com/exploits/45769 · Exploit
vulncheck.com/advisories/winmtr-denial-of-service-via-buffer-overflow · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free