https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:10:14.220774+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04713 bdu:2022-04713 2026-10-05T23:10:14.386326+00:00 bdu:2022-04713 https://cve.radiocsirt.org/vuln/euvd-2026-258046 EUVD-2026-258046 2026-10-05T23:10:14.386369+00:00 EUVD-2026-258046 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24882 fkie_cve-2022-24882 2026-10-05T23:10:14.386384+00:00

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

 https://cve.radiocsirt.org/vuln/gsd-2022-24882 gsd-2022-24882 2026-10-05T23:10:14.386416+00:00 gsd-2022-24882 https://cve.radiocsirt.org/vuln/oesa-2022-1657 OESA-2022-1657 — freerdp security update 2026-10-05T23:10:14.386427+00:00

Affected: openEuler:20.03-LTS-SP1: freerdp, openEuler:20.03-LTS-SP3: freerdp, openEuler:22.03-LTS: freerdp

FreeRDP is a client implementation of the Remote Desktop Protocol (RDP) that follows Microsoft's open specifications. This package provides the client applications xfreerdp and wlfreerdp.

Security Fix(es):

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.(CVE-2022-24883)

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.(CVE-2022-24882)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13504-1 openSUSE-SU-2024:13504-1 — freerdp-2.11.2-3.1 on GA media 2026-10-05T23:10:14.386478+00:00

freerdp-2.11.2-3.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:2352-1 SUSE-SU-2022:2352-1 — Security update for freerdp 2026-10-05T23:10:14.386506+00:00

Security update for freerdp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24882 UBUNTU-CVE-2022-24882 2026-10-05T23:10:14.386522+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.