https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:19:02.679504+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:54512 ALSA-2026:54512 — Moderate: gnome-remote-desktop security update 2026-10-15T23:19:02.686658+00:00

Affected: AlmaLinux:10: gnome-remote-desktop

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.

Security Fix(es):

* gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service (CVE-2026-18358)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-351876 EUVD-2026-351876 2026-10-15T23:19:02.686725+00:00 EUVD-2026-351876 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18358 fkie_cve-2026-18358 2026-10-15T23:19:02.686742+00:00

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.

 https://cve.radiocsirt.org/vuln/ghsa-5hp4-5mvq-qw3w GHSA-5hp4-5mvq-qw3w 2026-10-15T23:19:02.686790+00:00

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21888-1 openSUSE-SU-2026:21888-1 — Security update for gnome-remote-desktop 2026-10-15T23:19:02.686808+00:00

Security update for gnome-remote-desktop

 https://cve.radiocsirt.org/vuln/rlsa-2026:54512 RLSA-2026:54512 — Moderate: gnome-remote-desktop security update 2026-10-15T23:19:02.686825+00:00

Affected: Rocky Linux:10: gnome-remote-desktop

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.

Security Fix(es):

* gnome-remote-desktop: gnome-remote-desktop system-mode RDP server missing connection throttling allows unauthenticated denial of service (CVE-2026-18358)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18358 UBUNTU-CVE-2026-18358 2026-10-15T23:19:02.686849+00:00

Affected: Ubuntu:20.04:LTS: gnome-remote-desktop, Ubuntu:22.04:LTS: gnome-remote-desktop, Ubuntu:24.04:LTS: gnome-remote-desktop, Ubuntu:26.04:LTS: gnome-remote-desktop

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2829 WID-SEC-W-2026-2829 — Red Hat Enterprise Linux (gnome-remote-desktop): Schwachstelle ermöglicht Denial of Service 2026-10-15T23:19:02.686874+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux (gnome-remote-desktop) ausnutzen, um einen Denial of Service Angriff durchzuführen.