CVE-2006-2369
NoneCVSS
—
EPSS
92.4%
Published
May 15, 2006
CISA due date
—
The record
RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, as originally demonstrated using a long password.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | vnc4 | 0 | 4.1.1+X4.3.0-10 |
Related vulnerabilities
- CVE-2026-56850 A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions… CWE-287
- CVE-2026-50365 Improper authentication in Windows RPC API allows an unauthorized attacker to elevate… CWE-287
- CVE-2026-55689 OpenFGA is an authorization/permission engine built for developers. CWE-287
- CVE-2026-49869 Kestra is an open-source, event-driven orchestration platform. CWE-287
- CVE-2026-55962 TLS 1.3 post-handshake authentication (PHA) issue where a server could accept a client's… CWE-287
- CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) resumption, which previously skipped… CWE-287
- CVE-2026-54089 File Browser is a file managing interface for uploading, deleting, previewing, renaming… CWE-287
- CVE-2026-55759 Rocket.Chat is an open-source, secure, fully customizable communications platform. CWE-287