GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2026:11543-1

Vulnerability from csaf_opensuse - Published: 2026-08-18 00:00 - Updated: 2026-09-16 21:26
Summary
xrdp-0.10.6.1-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: xrdp-0.10.6.1-1.1 on GA media
Description of the patch: These are all security issues fixed in the xrdp-0.10.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11543
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2026-41252
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64 —
Vendor Fix
Threats
Impact critical
CVE-2026-41521
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact important
CVE-2026-42218
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact moderate
CVE-2026-44178
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact important
CVE-2026-44978
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact moderate
CVE-2026-54538
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact important
CVE-2026-55238
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact moderate
CVE-2026-55626
8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact important
CVE-2026-55639
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact moderate
CVE-2026-55645
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
Recommended 8 products, the same list as for CVE-2026-41252
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2026-41252/ self
https://www.suse.com/security/cve/CVE-2026-41521/ self
https://www.suse.com/security/cve/CVE-2026-42218/ self
https://www.suse.com/security/cve/CVE-2026-44178/ self
https://www.suse.com/security/cve/CVE-2026-44978/ self
https://www.suse.com/security/cve/CVE-2026-54538/ self
https://www.suse.com/security/cve/CVE-2026-55238/ self
https://www.suse.com/security/cve/CVE-2026-55626/ self
https://www.suse.com/security/cve/CVE-2026-55639/ self
https://www.suse.com/security/cve/CVE-2026-55645/ self
https://www.suse.com/security/cve/CVE-2026-41252 external
https://bugzilla.suse.com/1271926 external
https://www.suse.com/security/cve/CVE-2026-41521 external
https://bugzilla.suse.com/1271927 external
https://www.suse.com/security/cve/CVE-2026-42218 external
https://bugzilla.suse.com/1271928 external
https://www.suse.com/security/cve/CVE-2026-44178 external
https://bugzilla.suse.com/1271929 external
https://www.suse.com/security/cve/CVE-2026-44978 external
https://bugzilla.suse.com/1271943 external
https://www.suse.com/security/cve/CVE-2026-54538 external
https://bugzilla.suse.com/1271938 external
https://www.suse.com/security/cve/CVE-2026-55238 external
https://bugzilla.suse.com/1271939 external
https://www.suse.com/security/cve/CVE-2026-55626 external
https://bugzilla.suse.com/1271940 external
https://www.suse.com/security/cve/CVE-2026-55639 external
https://bugzilla.suse.com/1271941 external
https://www.suse.com/security/cve/CVE-2026-55645 external
https://bugzilla.suse.com/1271942 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "xrdp-0.10.6.1-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the xrdp-0.10.6.1-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11543",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11543-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-41252 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-41252/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-41521 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-41521/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42218 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42218/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44178 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44178/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-44978 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-44978/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-54538 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-54538/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-55238 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-55238/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-55626 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-55626/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-55639 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-55639/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-55645 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-55645/"
      }
    ],
    "title": "xrdp-0.10.6.1-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-16T21:26:35Z",
      "generator": {
        "date": "2026-08-18T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11543-1",
      "initial_release_date": "2026-08-18T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-08-18T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:24:18Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:26:35Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xrdp-0.10.6.1-1.1.aarch64",
                "product": {
                  "name": "xrdp-0.10.6.1-1.1.aarch64",
                  "product_id": "xrdp-0.10.6.1-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:neutrinolabs:xrdp:0.10.6.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xrdp@0.10.6.1-1.1?arch=aarch64\u0026upstream=xrdp-0.10.6.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xrdp-devel-0.10.6.1-1.1.aarch64",
                "product": {
                  "name": "xrdp-devel-0.10.6.1-1.1.aarch64",
                  "product_id": "xrdp-devel-0.10.6.1-1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:neutrinolabs:xrdp:0.10.6.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xrdp-devel@0.10.6.1-1.1?arch=aarch64\u0026upstream=xrdp-0.10.6.1-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xrdp-0.10.6.1-1.1.ppc64le",
                "product": {
                  "name": "xrdp-0.10.6.1-1.1.ppc64le",
                  "product_id": "xrdp-0.10.6.1-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:neutrinolabs:xrdp:0.10.6.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xrdp@0.10.6.1-1.1?arch=ppc64le\u0026upstream=xrdp-0.10.6.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xrdp-devel-0.10.6.1-1.1.ppc64le",
                "product": {
                  "name": "xrdp-devel-0.10.6.1-1.1.ppc64le",
                  "product_id": "xrdp-devel-0.10.6.1-1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:neutrinolabs:xrdp:0.10.6.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xrdp-devel@0.10.6.1-1.1?arch=ppc64le\u0026upstream=xrdp-0.10.6.1-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xrdp-0.10.6.1-1.1.s390x",
                "product": {
                  "name": "xrdp-0.10.6.1-1.1.s390x",
                  "product_id": "xrdp-0.10.6.1-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:neutrinolabs:xrdp:0.10.6.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xrdp@0.10.6.1-1.1?arch=s390x\u0026upstream=xrdp-0.10.6.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xrdp-devel-0.10.6.1-1.1.s390x",
                "product": {
                  "name": "xrdp-devel-0.10.6.1-1.1.s390x",
                  "product_id": "xrdp-devel-0.10.6.1-1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:neutrinolabs:xrdp:0.10.6.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xrdp-devel@0.10.6.1-1.1?arch=s390x\u0026upstream=xrdp-0.10.6.1-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xrdp-0.10.6.1-1.1.x86_64",
                "product": {
                  "name": "xrdp-0.10.6.1-1.1.x86_64",
                  "product_id": "xrdp-0.10.6.1-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:neutrinolabs:xrdp:0.10.6.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xrdp@0.10.6.1-1.1?arch=x86_64\u0026upstream=xrdp-0.10.6.1-1.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xrdp-devel-0.10.6.1-1.1.x86_64",
                "product": {
                  "name": "xrdp-devel-0.10.6.1-1.1.x86_64",
                  "product_id": "xrdp-devel-0.10.6.1-1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:neutrinolabs:xrdp:0.10.6.1:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xrdp-devel@0.10.6.1-1.1?arch=x86_64\u0026upstream=xrdp-0.10.6.1-1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xrdp-0.10.6.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64"
        },
        "product_reference": "xrdp-0.10.6.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xrdp-0.10.6.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le"
        },
        "product_reference": "xrdp-0.10.6.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xrdp-0.10.6.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x"
        },
        "product_reference": "xrdp-0.10.6.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xrdp-0.10.6.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64"
        },
        "product_reference": "xrdp-0.10.6.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xrdp-devel-0.10.6.1-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64"
        },
        "product_reference": "xrdp-devel-0.10.6.1-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xrdp-devel-0.10.6.1-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le"
        },
        "product_reference": "xrdp-devel-0.10.6.1-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xrdp-devel-0.10.6.1-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x"
        },
        "product_reference": "xrdp-devel-0.10.6.1-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xrdp-devel-0.10.6.1-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        },
        "product_reference": "xrdp-devel-0.10.6.1-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-41252",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-41252"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling of RFB protocol color map messages from a VNC server, where incoming color indices are not properly validated. A malicious VNC server can exploit this flaw by sending crafted messages with out-of-range values, leading to an out-of-bounds write on the heap. This memory corruption can result in a denial of service (DoS) or potentially allow remote code execution (RCE) prior to authentication. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-41252",
          "url": "https://www.suse.com/security/cve/CVE-2026-41252"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271926 for CVE-2026-41252",
          "url": "https://bugzilla.suse.com/1271926"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-41252"
    },
    {
      "cve": "CVE-2026-41521",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-41521"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer size calculation, resulting in an undersized allocation. Subsequent processing of the incoming image data using the original oversized parameters leads to an out-of-bounds read. An unauthenticated remote attacker could exploit this flaw to disclose sensitive information from the heap memory or cause a denial of service (DoS) via a process crash. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-41521",
          "url": "https://www.suse.com/security/cve/CVE-2026-41521"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271927 for CVE-2026-41521",
          "url": "https://bugzilla.suse.com/1271927"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-41521"
    },
    {
      "cve": "CVE-2026-42218",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42218"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker can infer the existence of a username on the system, leading to unauthorized information disclosure via username enumeration. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42218",
          "url": "https://www.suse.com/security/cve/CVE-2026-42218"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271928 for CVE-2026-42218",
          "url": "https://bugzilla.suse.com/1271928"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-42218"
    },
    {
      "cve": "CVE-2026-44178",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44178"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap-based buffer overflow vulnerability within the virtual channel forwarding mechanism. When forwarding data from a remote client to the internal channel server, the xrdp process utilizes a fixed-size buffer without adequate bounds checking on the incoming payload. An authenticated remote attacker can exploit this flaw by sending a specially crafted virtual channel message that exceeds the buffer capacity, leading to heap memory corruption. This may result in a denial of service or the execution of arbitrary code with the privileges of the xrdp process. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44178",
          "url": "https://www.suse.com/security/cve/CVE-2026-44178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271929 for CVE-2026-44178",
          "url": "https://bugzilla.suse.com/1271929"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-44178"
    },
    {
      "cve": "CVE-2026-44978",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-44978"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to security_layer=negotiate or security_layer=rdp, and the crypto level is changed to crypt_level=fips in xrdp.ini. In this specific non-default mode, the server fails to validate the FIPS padding length field, leading to a pointer underflow and a subsequent negative length calculation. An unauthenticated remote attacker can exploit this by sending a crafted FIPS-protected PDU, causing a heap out-of-bounds read that results in a process crash and denial of service (DoS). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-44978",
          "url": "https://www.suse.com/security/cve/CVE-2026-44978"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271943 for CVE-2026-44978",
          "url": "https://bugzilla.suse.com/1271943"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-44978"
    },
    {
      "cve": "CVE-2026-54538",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-54538"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted packet that forces the xrdp process or thread into an infinite, CPU-bound loop. Because the internal pointer fails to advance and the deadlock prevention mechanism is bypassed for specific protocol data unit types, the process consumes excessive CPU resources indefinitely. This can render the xrdp service unavailable and potentially lead to system-wide resource exhaustion if multiple malicious connections are established. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-54538",
          "url": "https://www.suse.com/security/cve/CVE-2026-54538"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271938 for CVE-2026-54538",
          "url": "https://bugzilla.suse.com/1271938"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-54538"
    },
    {
      "cve": "CVE-2026-55238",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-55238"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validation for specific capability sets. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted RDP packet containing malformed capability data. Due to missing bounds checks, the xrdp process may perform out-of-bounds memory reads, which can result in the termination of the service (Denial of Service). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-55238",
          "url": "https://www.suse.com/security/cve/CVE-2026-55238"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271939 for CVE-2026-55238",
          "url": "https://bugzilla.suse.com/1271939"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-55238"
    },
    {
      "cve": "CVE-2026-55626",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-55626"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A local authenticated attacker could exploit this vulnerability to bypass intended session isolation, allowing them to unauthorizedly view or control the active desktop sessions of other users on the same system. Users using other backends, such as xorgxrdp or Xvnc over TCP sockets, are not affected. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-55626",
          "url": "https://www.suse.com/security/cve/CVE-2026-55626"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271940 for CVE-2026-55626",
          "url": "https://bugzilla.suse.com/1271940"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-55626"
    },
    {
      "cve": "CVE-2026-55639",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-55639"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation phase, the parser fails to perform sufficient length validation for the incoming data block. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted RDP packet containing malformed data. Due to missing bounds checks, the xrdp process may read a small number of bytes beyond the declared data block boundary, potentially disclosing process memory contents that could be combined with other vulnerabilities. This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-55639",
          "url": "https://www.suse.com/security/cve/CVE-2026-55639"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271941 for CVE-2026-55639",
          "url": "https://bugzilla.suse.com/1271941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-55639"
    },
    {
      "cve": "CVE-2026-55645",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-55645"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of Client Control PDUs. During the RDP connection sequence, the parser does not perform sufficient length validation before reading specific data fields from the network stream. A remote, unauthenticated attacker could potentially exploit this flaw by sending a specially crafted, truncated Client Control PDU. Due to missing bounds checks, the xrdp process may perform out-of-bounds memory reads, which can result in the termination of the service (Denial of Service). However, since xrdp forks a new process for each connection by default, an out-of-bounds read causing a process crash is unlikely to bring down the entire xrdp service.This issue has been fixed in version 0.10.6.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
          "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-55645",
          "url": "https://www.suse.com/security/cve/CVE-2026-55645"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271942 for CVE-2026-55645",
          "url": "https://bugzilla.suse.com/1271942"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-0.10.6.1-1.1.x86_64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.aarch64",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.ppc64le",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.s390x",
            "openSUSE Tumbleweed:xrdp-devel-0.10.6.1-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-55645"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.