What is CVE-2026-55238?

CVE-2026-55238 is a medium-severity vulnerability in Neutrinolabs Xrdp, classified under Buffer Over-read. CVSS score: 5.3/10. Published 2026-07-20.

How severe is CVE-2026-55238?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Neutrinolabs Xrdp

CVE-2026-55238

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the processing of RDP Confirm Active PDU, where during the capability negotiation phase, the parser did not perform sufficient length validatio…

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Neutrinolabs Xrdp — versions < 0.10.6.1

Weakness classification (CWE)

CWE-126 — Buffer Over-read

References

security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2026-55238?: CVE-2026-55238 is a medium-severity vulnerability in Neutrinolabs Xrdp, classified under Buffer Over-read. CVSS score: 5.3/10. Published 2026-07-20.
How severe is CVE-2026-55238?: Medium severity. CVSS v3 base score is 5.3 out of 10.