CVE-2026-55639
published 2026-07-20CVE-2026-55639: xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS…
PriorityP431medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.25%
17.2th percentile
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation phase, the parser fails to perform sufficient length validation for the incoming data block. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted RDP packet containing malformed data. Due to missing bounds checks, the xrdp process may read a small number of bytes beyond the declared data block boundary, potentially disclosing process memory contents that could be combined with other vulnerabilities. This issue has been fixed in version 0.10.6.1.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| neutrinolabs | xrdp | < 0.10.6.1 | 0.10.6.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [epel-all]
bugzilla·2026-07-20·CVSS 5.3
CVE-2026-55639 [MEDIUM] CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [epel-all]
CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation phase, the parser fails to perform sufficient length validation for the incoming data block. A remote, unauthenticated attacker could potentially exploit this fl
Bugzilla
CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [fedora-all]
bugzilla·2026-07-20·CVSS 5.3
CVE-2026-55639 [MEDIUM] CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [fedora-all]
CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation phase, the parser fails to perform sufficient length validation for the incoming data block. A remote, unauthenticated attacker could potentially exploit this
Bugzilla
CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak
bugzilla·2026-07-20·CVSS 5.3
CVE-2026-55639 [MEDIUM] CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak
CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation phase, the parser fails to perform sufficient length validation for the incoming data block. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted RDP packet containing malformed data. Due to missing bounds checks, the xrdp process may read a small number of bytes beyond the declared data block boundary, potentially disclosing process memory conte
2026-07-20
Published