Out-of-bounds Read in Neutrinolabs Xrdp

CVE-2026-33689

xrdp is an open source RDP server. Versions through 0.10.5 have an out-of-bounds read vulnerability in the pre-authentication RDP message parsing logic. A remote, unauthenticated attacker can trigger this flaw by sending a specially crafte…

Vulnerability class: Buffer Overflow

EPSS: 0.002 (39.6th percentile) — read the EPSS interpretation.