PT-2026-61025 · Xrdp · Xrdp

CVE-2026-55639 · Published 2026-07-08 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1

Description An issue exists in the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation phase, the parser fails to perform sufficient length validation for the incoming data block. A remote, unauthenticated attacker could exploit this by sending a specially crafted RDP packet containing malformed data. Due to missing bounds checks, the process may read bytes beyond the declared data block boundary, potentially disclosing process memory contents.

Recommendations Update to version 0.10.6.1.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-55639

GHSA-6G36-MXCF-R3GC

Affected Products

Xrdp

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55639.json · Exploit
• https://ubuntu.com/security/CVE-2026-55639 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-55639 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-55639 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-55639 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-55639 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-55639 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-55639 · Vendor Advisory
• https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1 · Note
• https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-6g36-mxcf-r3gc · Note
• https://twitter.com/MalwareObserver/status/2079279764246872259 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2079363378401657195 · Twitter Post