https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T06:09:40.570536+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121396 fkie_cve-2026-121396 2026-11-05T06:09:40.573713+00:00

FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_auth_verifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the connecting client process.

 https://db.gcve.eu/vuln/ghsa-q6j5-jc7p-hf9x GHSA-q6j5-jc7p-hf9x 2026-11-05T06:09:40.573778+00:00

FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in rts_read_auth_verifier triggered by malformed RTS padding. Attackers controlling an RD Gateway can send a crafted RPC-over-HTTP RTS PDU with inconsistent authentication padding to abort the connecting client process.