Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:40:29 +0000 CVE-2026-42218 — XRDP is vulnerable to a server timing attack, leading to user enumeration https://cve.radiocsirt.org/vuln/cve-2026-42218 <p><strong>Affected:</strong> neutrinolabs xrdp</p> <p>xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker can infer the existence of a username on the system, leading to unauthorized information disclosure via username enumeration. This issue has been fixed in version 0.10.6.1.</p> <p><strong>Affected:</strong> neutrinolabs xrdp</p> <p>xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker can infer the existence of a username on the system, leading to unauthorized information disclosure via username enumeration. This issue has been fixed in version 0.10.6.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-42218