What is CVE-2026-55626?

CVE-2026-55626 is a high-severity vulnerability in Neutrinolabs Xrdp, classified under Improper Authentication. CVSS score: 8.0/10. Published 2026-07-20.

How severe is CVE-2026-55626?

High severity. CVSS v3 base score is 8.0 out of 10.

Auth bypass in Neutrinolabs Xrdp

CVE-2026-55626

xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with insufficient authentication mechanisms. A…

Vulnerability class: Broken Authentication

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L.

Affected products

Neutrinolabs Xrdp — versions < 0.10.6.1

Weakness classification (CWE)

CWE-287 — Improper Authentication
CWE-306 — Missing Authentication for Critical Function

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-55626?: CVE-2026-55626 is a high-severity vulnerability in Neutrinolabs Xrdp, classified under Improper Authentication. CVSS score: 8.0/10. Published 2026-07-20.
How severe is CVE-2026-55626?: High severity. CVSS v3 base score is 8.0 out of 10.