PT-2026-61003 · Xrdp · Xrdp

CVE-2026-41252 · Published 2026-07-08 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1

Description A missing bounds check in the server occurs when operating in vnc-any mode during the handling of RFB protocol color map messages from a VNC server. Because incoming color indices are not properly validated, a malicious VNC server can send crafted messages with out-of-range values, leading to a heap-based buffer overflow. This memory corruption can result in a denial of service (DoS) or potentially allow remote code execution (RCE) prior to authentication.

Recommendations Update to version 0.10.6.1.

Exploit

Fix

RCE

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-41252

GHSA-W5VG-6QMV-J63J

Affected Products

Xrdp

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41252.json · Exploit
• https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-w5vg-6qmv-j63j · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-41252 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-41252 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-41252 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-41252 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-41252 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41252 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-41252 · Security Note
• https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1 · Note
• https://t.me/cveNotify/209979 · Telegram Post