CVE-2006-2369: Vnc Realvnc

High severity, CVSS 7.5. EPSS: 92.4% chance of exploitation in the next 30 days.

RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, as originally demonstrated using a long password.

Affected products

• Vnc Realvnc: version 4.1.1 only

Published 2006-05-15. Last modified 2026-06-16.