CVE-2006-2450: Libvncserver

High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days.

auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369.

Affected products

• Libvncserver Libvncserver: version 0.7.1 only

Published 2006-07-18. Last modified 2026-06-16.