CVE-2026-7830

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-7830", "assignerOrgId": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "state": "PUBLISHED", "assignerShortName": "securin", "dateReserved": "2026-05-05T03:40:59.002Z", "datePublished": "2026-07-01T03:33:24.106Z", "dateUpdated": "2026-07-09T04:35:51.099Z"}, "containers": {"cna": {"title": "UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception", "descriptions": [{"lang": "en", "value": "UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer (DH_MAX_BITS controls the prime size). A 64-bit DH key can be broken by Pollard's rho algorithm in under one second on current hardware. Additionally, the private exponent is generated by the rng() function, which multiplies three libc rand() values seeded from time(NULL). With approximately 31 bits of internal state and a time-based seed, the private exponent is recoverable in under a minute by a passive observer. A network attacker who can observe the MS-Logon II handshake (via sniffing, recording, or man-in-the-middle) can derive the shared DH key and decrypt the encapsulated username and password, resulting in full credential disclosure. This affects legacy MS-Logon II connections; MS-Logon III (X25519 + AES-256-GCM) is unaffected."}], "affected": [{"vendor": "uvnc", "product": "UltraVNC", "versions": [{"version": "0", "lessThanOrEqual": "1.8.2.2", "status": "affected", "versionType": "custom"}], "defaultStatus": "unaffected", "modules": ["winvnc", "ms-logon"]}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-326", "lang": "en", "description": "Inadequate Encryption Strength"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-338", "lang": "en", "description": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH"}}], "references": [{"url": "https://uvnc.com/", "name": "UltraVNC project page", "tags": ["vendor-advisory"]}, {"url": "https://github.com/ultravnc/UltraVNC", "name": "UltraVNC source repository", "tags": ["product"]}, {"url": "https://www.securin.io/zero-days/cve-2026-7830-31-bit-dh-weak-rng-ms-logon-credential-interception-ultravnc"}], "timeline": [{"time": "2026-06-02T00:00:00.000Z", "lang": "en", "value": "Vulnerability discovered during security audit"}, {"time": "2026-06-17T00:00:00.000Z", "lang": "en", "value": "Reported to vendor (coordinated disclosure)"}, {"time": "2026-09-15T00:00:00.000Z", "lang": "en", "value": "Planned public disclosure (90-day window)"}], "credits": [{"lang": "en", "value": "Arjun Basnet, Securin (arjun.basnet@securin.io)", "type": "finder"}], "source": {"discovery": "EXTERNAL", "advisory": "Securin Security Advisory \u2014 FINDING-002"}, "providerMetadata": {"orgId": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "shortName": "securin", "dateUpdated": "2026-07-09T04:35:51.099Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-01T13:13:10.627838Z", "id": "CVE-2026-7830", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-01T13:13:23.590Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-7830", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-01T13:13:10.627838Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-01T13:13:18.444Z"}}], "cna": {"title": "UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception", "source": {"advisory": "Securin Security Advisory \u2014 FINDING-002", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Arjun Basnet, Securin (arjun.basnet@securin.io)"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "uvnc", "modules": ["winvnc", "ms-logon"], "product": "UltraVNC", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.8.2.2"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-06-02T00:00:00.000Z", "value": "Vulnerability discovered during security audit"}, {"lang": "en", "time": "2026-06-17T00:00:00.000Z", "value": "Reported to vendor (coordinated disclosure)"}, {"lang": "en", "time": "2026-09-15T00:00:00.000Z", "value": "Planned public disclosure (90-day window)"}], "references": [{"url": "https://uvnc.com/", "name": "UltraVNC project page", "tags": ["vendor-advisory"]}, {"url": "https://github.com/ultravnc/UltraVNC", "name": "UltraVNC source repository", "tags": ["product"]}, {"url": "https://www.securin.io/zero-days/cve-2026-7830-31-bit-dh-weak-rng-ms-logon-credential-interception-ultravnc"}], "descriptions": [{"lang": "en", "value": "UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer (DH_MAX_BITS controls the prime size). A 64-bit DH key can be broken by Pollard's rho algorithm in under one second on current hardware. Additionally, the private exponent is generated by the rng() function, which multiplies three libc rand() values seeded from time(NULL). With approximately 31 bits of internal state and a time-based seed, the private exponent is recoverable in under a minute by a passive observer. A network attacker who can observe the MS-Logon II handshake (via sniffing, recording, or man-in-the-middle) can derive the shared DH key and decrypt the encapsulated username and password, resulting in full credential disclosure. This affects legacy MS-Logon II connections; MS-Logon III (X25519 + AES-256-GCM) is unaffected."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-326", "description": "Inadequate Encryption Strength"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-338", "description": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"}]}], "providerMetadata": {"orgId": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "shortName": "securin", "dateUpdated": "2026-07-09T04:35:51.099Z"}}}, "cveMetadata": {"cveId": "CVE-2026-7830", "state": "PUBLISHED", "dateUpdated": "2026-07-09T04:35:51.099Z", "dateReserved": "2026-05-05T03:40:59.002Z", "assignerOrgId": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "datePublished": "2026-07-01T03:33:24.106Z", "assignerShortName": "securin"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["winvnc", "ms-logon"], "product": "UltraVNC", "vendor": "uvnc", "versions": [{"lessThanOrEqual": "1.8.2.2", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "33c584b5-0579-4c06-b2a0-8d8329fcab9c"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:uvnc:ultravnc:*:*:*:*:*:*:*:*", "matchCriteriaId": "593F7EC1-0922-4652-817A-7D57A0F1210D", "versionEndIncluding": "1.8.2.2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer (DH_MAX_BITS controls the prime size). A 64-bit DH key can be broken by Pollard's rho algorithm in under one second on current hardware. Additionally, the private exponent is generated by the rng() function, which multiplies three libc rand() values seeded from time(NULL). With approximately 31 bits of internal state and a time-based seed, the private exponent is recoverable in under a minute by a passive observer. A network attacker who can observe the MS-Logon II handshake (via sniffing, recording, or man-in-the-middle) can derive the shared DH key and decrypt the encapsulated username and password, resulting in full credential disclosure. This affects legacy MS-Logon II connections; MS-Logon III (X25519 + AES-256-GCM) is unaffected."}, {"lang": "es", "value": "UltraVNC hasta la versi\u00f3n 1.8.2.2 utiliza criptograf\u00eda inadecuada en el esquema de autenticaci\u00f3n MS-Logon II (rfbUltraVNC_MsLogonIIAuth). En rfb/dh.cpp, el intercambio de claves Diffie-Hellman se realiza con par\u00e1metros que caben en un entero sin signo de 64 bits (DH_MAX_BITS controla el tama\u00f1o del n\u00famero primo). Una clave DH de 64 bits puede ser rota por el algoritmo rho de Pollard en menos de un segundo en hardware actual. Adem\u00e1s, el exponente privado es generado por la funci\u00f3n rng(), que multiplica tres valores de libc rand() sembrados desde time(NULL). Con aproximadamente 31 bits de estado interno y una semilla basada en el tiempo, el exponente privado es recuperable en menos de un minuto por un observador pasivo. Un atacante de red que puede observar el handshake de MS-Logon II (mediante sniffing, grabaci\u00f3n o man-in-the-middle) puede derivar la clave DH compartida y descifrar el nombre de usuario y la contrase\u00f1a encapsulados, lo que resulta en la divulgaci\u00f3n completa de credenciales. Esto afecta a las conexiones MS-Logon II heredadas; MS-Logon III (X25519 + AES-256-GCM) no se ve afectado."}], "id": "CVE-2026-7830", "lastModified": "2026-10-25T17:10:00.197", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 5.2, "source": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-7830", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-07-01T13:13:10.627838Z", "version": "2.0.3"}}]}, "published": "2026-07-01T05:16:24.210", "references": [{"source": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "tags": ["Product"], "url": "https://github.com/ultravnc/UltraVNC"}, {"source": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "tags": ["Product", "Release Notes"], "url": "https://uvnc.com/"}, {"source": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "url": "https://www.securin.io/zero-days/cve-2026-7830-31-bit-dh-weak-rng-ms-logon-credential-interception-ultravnc"}], "sourceIdentifier": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-326"}, {"lang": "en", "value": "CWE-338"}], "source": "33c584b5-0579-4c06-b2a0-8d8329fcab9c", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.8.2.2]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "UltraVNC", "source": "cna", "vendor": "uvnc"}, "product": "ultravnc", "vendor": "uvnc"}], "created": "2026-07-01T09:00:14.844197+00:00", "updated": "2026-07-01T14:00:06.697739+00:00", "vendors": ["uvnc", "uvnc$PRODUCT$ultravnc"]}