https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T05:59:29.930271+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/alsa-2026:73979 ALSA-2026:73979 — Critical: freerdp security update 2026-10-17T05:59:29.974270+00:00

Affected: AlmaLinux:10: freerdp, AlmaLinux:10: freerdp-devel, AlmaLinux:10: freerdp-libs, AlmaLinux:10: freerdp-server, AlmaLinux:10: libwinpr, AlmaLinux:10: libwinpr-devel

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox.

Security Fix(es):

* freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass (CVE-2026-91949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://db.gcve.eu/vuln/fkie_cve-2026-91949 fkie_cve-2026-91949 2026-10-17T05:59:29.974342+00:00

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.

 https://db.gcve.eu/vuln/ghsa-hcpv-8ff6-4xx8 GHSA-hcpv-8ff6-4xx8 2026-10-17T05:59:29.974372+00:00

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.

 https://db.gcve.eu/vuln/rhsa-2026:73979 RHSA-2026:73979 — security update for freerdp 2026-10-17T05:59:29.974389+00:00

security update for freerdp

 https://db.gcve.eu/vuln/rhsa-2026:74471 RHSA-2026:74471 — Red Hat Security Advisory: freerdp security update 2026-10-17T05:59:29.974411+00:00

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

 https://db.gcve.eu/vuln/ubuntu-cve-2026-91949 UBUNTU-CVE-2026-91949 2026-10-17T05:59:29.974430+00:00

Affected: Ubuntu:16.04:LTS: freerdp, Ubuntu:Pro:18.04:LTS: freerdp2, Ubuntu:18.04:LTS: freerdp, Ubuntu:Pro:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2, Ubuntu:24.04:LTS: freerdp3, Ubuntu:Pro:24.04:LTS: freerdp2, Ubuntu:26.04:LTS: freerdp3

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.