The version of freerdp installed on the remote host is prior to 2.11.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3181 advisory.

    FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer     dereference vulnerability in rdp_write_logon_info_v2() allows a malicious RDP server to crash FreeRDP     proxy by sending a specially crafted LogonInfoV2 PDU with cbDomain=0 or cbUserName=0. This vulnerability     is fixed in 3.22.0. (CVE-2026-23948)

    Client side issue with FreeRDP (CVE-2026-24491)

    Client side issue with FreeRDP (CVE-2026-24675)

    Client side issue with FreeRDP (CVE-2026-24676)

    Client side issue with FreeRDP (CVE-2026-24677)

    Client side issue with FreeRDP (CVE-2026-24679)

    Client side issue with FreeRDP (CVE-2026-24681)

    Client side issue with FreeRDP (CVE-2026-24683)

    Client side issue with FreeRDP (CVE-2026-24684)

    FreeRDP before 3.22.0 contains a use-after-free vulnerability in dvcman_channel_close and     dvcman_call_on_receive due to improper synchronization of channel_callback access. A malicious RDP server     can trigger a race condition by sending DYNVC_DATA and DYNVC_CLOSE messages concurrently, causing heap-     use-after-free in the drdynvc client thread and potentially enabling remote code execution or denial of     service. (CVE-2026-56297)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : freerdp, --advisory ALAS2-2026-3181 (ALAS-2026-3181)

high Nessus Plugin ID 301263

Version 1.3