PT-2026-33498 · Xrdp · Xrdp

Exploitintel · Published 2026-04-17 · Updated 2026-05-19 · CVE-2026-32623

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6

Description A heap-based buffer overflow exists in the NeutrinoRDP module. When proxying RDP sessions to another server, the module does not properly validate the size of reassembled fragmented virtual channel data against its allocated memory buffer. A malicious downstream RDP server or an attacker performing a Man-in-the-Middle attack could exploit this to cause memory corruption, potentially resulting in a Denial of Service (DoS) or Remote Code Execution (RCE). This issue only affects environments where the NeutrinoRDP module has been explicitly compiled and enabled.

Recommendations Update to version 0.10.6. As a temporary workaround, disable the NeutrinoRDP module if it was explicitly enabled.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2026-06987

CVE-2026-32623

OPENSUSE-SU-2026:10816-1

Affected Products

Xrdp

References · 21

• https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-phw3-qp59-x2v4 · Vendor Advisory
• https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6 · Patch
• https://ubuntu.com/security/CVE-2026-32623 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06987 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-32623 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-32623 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-32623 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-32623 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10816-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32623 · Security Note
• https://altsp.su/obnovleniya-bezopasnosti · Note
• https://suse.com/security/cve/CVE-2024-39917 · Note
• https://twitter.com/CVEnew/status/2045467419217404350 · Twitter Post
• https://suse.com/security/cve/CVE-2026-35512 · Note
• https://suse.com/security/cve/CVE-2026-33689 · Note