{"@context":"https://openvex.dev/ns/v0.2.0","@id":"https://database.harborguard.co/cve/CVE-2026-7830/vex.json","author":"HarborGuard Database","role":"Document Creator","timestamp":"2026-07-01T03:33:24.106Z","version":1,"tooling":"HarborGuard Database (https://database.harborguard.co)","statements":[{"vulnerability":{"name":"CVE-2026-7830","@id":"https://www.cve.org/CVERecord?id=CVE-2026-7830","description":"UltraVNC through 1.8.2.2 uses inadequate cryptography in the MS-Logon II authentication scheme (rfbUltraVNC_MsLogonIIAuth). In rfb/dh.cpp the Diffie-Hellman key exchange is performed with parameters that fit in an unsigned 64-bit integer (DH_MAX_BITS controls the prime size). A 64-bit DH key can be broken by Pollard's rho algorithm in under one second on current hardware. Additionally, the private exponent is generated by the rng() function, which multiplies three libc rand() values seeded from "},"products":[{"@id":"cpe:2.3:a:uvnc:ultravnc:*:*:*:*:*:*:*:*","identifiers":{"cpe23":"cpe:2.3:a:uvnc:ultravnc:*:*:*:*:*:*:*:*"}}],"status":"affected","action_statement":"No fixed version is published yet; monitor the upstream advisory.","timestamp":"2026-07-01T03:33:24.106Z"}]}