CVE-2026-7830
UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer (DH_MAX_BITS controls the prime size). A 64-bit DH key can be broken by Pollard's rho algorithm in under one second on current hardware. Additionally, the private exponent is generated by the rng() function, which multiplies three libc rand() values seeded from time(NULL). With approximately 31 bits of internal state and a time-based seed, the private exponent is recoverable in under a minute by a passive observer. A network attacker who can observe the MS-Logon II handshake (via sniffing, recording, or man-in-the-middle) can derive the shared DH key and decrypt the encapsulated username and password, resulting in full credential disclosure. This affects legacy MS-Logon II connections; MS-Logon III (X25519 + AES-256-GCM) is unaffected.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.4
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS probability
- 0.29%
- CWE
- CWE-326, CWE-338
- Published
- 2026-07-01
- Last modified
- 2026-07-09
Affected products
- uvnc UltraVNC
Weakness type
Related vulnerabilities
- CVE-2026-86670 — aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
- CVE-2023-54356 — Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites
- CVE-2026-81718 — openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
- CVE-2026-79084 — Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to...
- CVE-2026-74889 — openssl_encrypt before 1.4.0 Weak Key Derivation via HKDF
- CVE-2026-65777 — Active Directory Security Feature Bypass Vulnerability
- CVE-2026-9201 — Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
- CVE-2026-59651 — BKS keystore accepts legacy version with 16-bit integrity MAC key