nico@love20202272
General
@ultravnc1 CVE-2026-3787- CVE-2026-4962
Post summary
The tweet merely lists two CVE identifiers without additional context or details.
1000041
139 followersView on X
CVE-2026-4962General(uvnc / ultravnc)
LOWCVSS 6.4 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in the library version.dll of the component Service. The manipulation results in uncontrolled search path. The attack needs to be approached locally. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
0.0/ 10 priority
Sources & remediation
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-426CWE-427
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- ultravnc
Threat summary
- 3 mentions across 2 observed days
- Momentum state: stable
What's happening
- Technical details provided in 1 signal
- General: 2 classified signals
- Disclosure: 1 classified signal
- Peaked 1d ago at 2 mentions (2026-03-28); latest day: 1
- 3 total mentions across 2 days
Affected systems
Vendors
Products
ultravnc
Deep dive
Activity timeline3 mentions / 2d
Signal classification2 categories
General266.7%
Disclosure133.3%
Referenced assets2 URLs
Classification over time
| Date | Total | Labels |
|---|
| 2026-03-28 | 2 | Disclosure1General1 |
| 2026-05-04 | 1 | General1 |
Full discourse3 posts
White Rabbitx@TheRabbitPyDisclosure🚨 UltraVNC Search Path Hijack CVSS: 8.8 DLL hijacking via search path vuln in UltraVNC grants SYSTEM privileges. Local attackers drop malicious DLLs for persistence and escalation on Windows. https://nvd.nist.gov/vuln/detail/CVE-2026-4962
Post summary
The post announces a new UltraVNC privilege‑escalation vulnerability (DLL hijacking) with a CVSS 8.8 score, but does not provide a PoC, exploit code, or patch details.
1000033434 followersView on X
CVE@CVEnewGeneralCVE-2026-4962 A security flaw has been discovered in UltraVNC up to 1.6.4.0. Affected by this issue is some unknown functionality in the library version.dll of the component Service.… https://www.cve.org/CVERecord?id=CVE-2026-4962
Post summary
The post announces a CVE for UltraVNC but provides no concrete details on exploitation, patching, or technical specifics.
000109056.9K followersView on X
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | uvnc | ultravnc | - | - | - |