← Back to all network ports
TCP
Vulnerable

5900 VNC

VNC exposes remote desktop control and is often paired with weak authentication or flat-network deployment.

Security Context

Port 5900 is high-risk when broadly exposed. Treat it as an attack-surface decision, not just a connectivity setting, and confirm whether the listener truly needs to be reachable.

  • !VNC commonly appears with weak or reused passwords.

Nmap Check

Use a version probe first so you confirm whether the expected service is really what is listening on this port.

nmap -sV -p 5900 <host>

Firewall Commands

UFW
sudo ufw allow 5900/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 5900 -j ACCEPT

Related TCP Ports