uvnc UltraVNC

• CVE-2026-7840 Critical 9.8 UltraVNC repeater HTTP server global buffer overflow via long URI (pre-auth RCE) 2.6%
• CVE-2026-7839 Critical 9.1 UltraVNC repeater ships hardcoded default admin password allowing unauthenticated admin access 0.7%
• CVE-2026-7838 High 8.8 UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length 1.9%
• CVE-2026-7831 High 7.5 UltraVNC viewer off-by-one stack overflow in ServerInit desktop name parsing 0.7%
• CVE-2026-7830 High 7.4 UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception 0.3%
• CVE-2026-7829 High 7.2 UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token 0.9%
• CVE-2026-7828 Medium 5.3 UltraVNC repeater integer overflow in win_log malloc leading to heap overflow 1.4%
• CVE-2026-44040 Medium 4.8 UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes 0.4%
• CVE-2026-44041 Medium 4.3 UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated 0.4%
• CVE-2026-44042 Low 3.7 UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check 0.5%