CVE-2022-38336: Mobatek Mobaxterm

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication.

Affected products

• Mobatek Mobaxterm: before 22.2 (fixed in 22.2)

Published 2022-12-06. Last modified 2026-06-17.