https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:14:01.992715+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:73979 ALSA-2026:73979 — Critical: freerdp security update 2026-10-02T15:14:02.083557+00:00

Affected: AlmaLinux:10: freerdp, AlmaLinux:10: freerdp-devel, AlmaLinux:10: freerdp-libs, AlmaLinux:10: freerdp-server, AlmaLinux:10: libwinpr, AlmaLinux:10: libwinpr-devel

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass (CVE-2026-91949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/euvd-2026-371595 EUVD-2026-371595 2026-10-02T15:14:02.083622+00:00 EUVD-2026-371595 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91949 fkie_cve-2026-91949 2026-10-02T15:14:02.083639+00:00

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.

 https://cve.radiocsirt.org/vuln/ghsa-hcpv-8ff6-4xx8 GHSA-hcpv-8ff6-4xx8 2026-10-02T15:14:02.083664+00:00

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.

 https://cve.radiocsirt.org/vuln/rhsa-2026:73979 RHSA-2026:73979 — Red Hat Security Advisory: freerdp security update 2026-10-02T15:14:02.083680+00:00

freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

 https://cve.radiocsirt.org/vuln/rhsa-2026:74471 RHSA-2026:74471 — Red Hat Security Advisory: freerdp security update 2026-10-02T15:14:02.083698+00:00

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-91949 UBUNTU-CVE-2026-91949 2026-10-02T15:14:02.083715+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:26.04:LTS: freerdp3

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3057 WID-SEC-W-2026-3057 — FreeRDP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-02T15:14:02.083745+00:00

Ein Angreifer kann mehrere Schwachstellen in FreeRDP ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.