https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-08T07:25:00.885836+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-121960 CVE-2026-121960 — FreeRDP before 3.32.2 Unauthenticated Denial of Service via CredSSP TSRequest 2026-11-08T07:25:00.887623+00:00

Affected: FreeRDP

FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPR_ASSERT and abort the server process.