CVE-2022-38336

HIGH 8.1CVE-2022-38336 · Published 06/12/2022 · updated 17/06/2026

In short

CVE-2022-38336 is a HIGH (CVSS 8.1) vulnerability affecting mobaxterm (mobatek).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.1% of all vulnerabilities.
Fix: update to 22.2 or later.

Package	Affected versions	Patched versions
mobaxterm mobatek	`< 22.2`	`22.2`

Description

An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication.

References

docs.ssh-mitm.at/vulnerabilities/CVE-2022-38336.html · Exploit

More vulnerabilities in mobaxterm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mobaxterm

mobatek

< 22.2

22.2

More vulnerabilities in mobaxterm

See all →