CVE

CVE-2022-25226

10.0

CVSS

Description

ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaining a valid SID without any kind of authentication. It is possible to achieve code execution on the server by sending keyboard or mouse events to the server.

Attack Vector

Privileges Req.

User Interaction

thinvnc

Updated Sep 28, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2022-25226 Scanner

CVE-2022-25226 Scanner - Authentication Bypass vulnerability in ThinVNC

Used 2.5k times · 3.3k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →