EIP-2026-116173

PRE-CVE

RealVNC 4.1.3 - 'ClientCutText' Message Remote Denial of Service

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-116173. PoCs published by John Leitch.

AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in RealVNC Viewer by sending maliciously crafted packets during the VNC protocol handshake. It exploits a flaw in handling overly large text lengths, causing the server to crash.

Description

RealVNC 4.1.3 - 'ClientCutText' Message Remote Denial of Service

Exploits (1)

exploitdb WORKING POC VERIFIED
by John Leitch · pythondoswindows
https://www.exploit-db.com/exploits/33924

This exploit targets a denial-of-service vulnerability in RealVNC Viewer by sending maliciously crafted packets during the VNC protocol handshake. It exploits a flaw in handling overly large text lengths, causing the server to crash.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: RealVNC Viewer 4.1.3
No auth needed
Prerequisites: Network access to the target VNC server · Server must be set to 'No Authentication' or attacker must implement authentication
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026