CVE-2021-28847: Mobatek Mobaxterm

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

MobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls.

Affected products

• Mobatek Mobaxterm: before 21.0 (fixed in 21.0)

Published 2021-06-03. Last modified 2026-06-17.