Resource exhaustion in Gnome Gnome-remote-desktop
CVE-2026-18358
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated rem…
Vulnerability class: DoS (Denial of Service)
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
Frequently asked questions
- What is CVE-2026-18358?
- CVE-2026-18358 is a high-severity vulnerability in Gnome Gnome-remote-desktop, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2026-07-31.
- How severe is CVE-2026-18358?
- High severity. CVSS v3 base score is 7.5 out of 10.