The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-05c06fa0a8 advisory.

    # Release notes for xrdp v0.10.6.1 (2026/07/06)

    ## General announcements

    This release fixes 10 vulnerabilities and 1 regression introduced by a vulnerability fix in the previous     release.

    If you like xrdp, please consider sponsoring or donating to the project. We accept financial contributions     through Open Collective, and direct donations to individual developers via GitHub Sponsors are also     welcome.

    ## Security fixes

    - CVE-2026-41252
    - CVE-2026-41521
    - CVE-2026-44178
    - CVE-2026-42218
    - CVE-2026-44978
    - CVE-2026-54538
    - CVE-2026-55238
    - CVE-2026-55626
    - CVE-2026-55639
    - CVE-2026-55645

    ## New features

    - None

    ## Bug fixes

    - regression: Fix SEGV in xrdp when running over TLS (#3793)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6469 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6469-1                   security@debian.org     https://www.debian.org/security/                                  Aron Xu     August 27, 2026                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : xrdp     CVE ID         : CVE-2026-32105 CVE-2026-32107 CVE-2026-32623 CVE-2026-32624                      CVE-2026-33145 CVE-2026-33516 CVE-2026-33689 CVE-2026-35512                      CVE-2026-41252 CVE-2026-41521 CVE-2026-42218 CVE-2026-44178                      CVE-2026-44978 CVE-2026-54538 CVE-2026-55238 CVE-2026-55639                      CVE-2026-55645     Debian Bug     : 1134339

    Multiple vulnerabilities were discovered in xrdp, a Remote Desktop     Protocol (RDP) server, which may result in denial of service,     information disclosure, privilege escalation or the execution of     arbitrary code. Several of these issues are exploitable by an     unauthenticated remote attacker.

    This update also changes two defaults, as part of the fixes:

     * Alternate shells supplied by the client are now rejected unless        AllowAlternateShell is explicitly enabled in /etc/xrdp/sesman.ini.
       This is the fix for CVE-2026-33145 and applies even on systems with        a locally modified sesman.ini.

     * The generic VNC proxy session type [vnc-any] is now commented out in        /etc/xrdp/xrdp.ini. It was reachable before authentication and        exposed CVE-2026-41252 and CVE-2026-41521 to unauthenticated        clients. Administrators who need it should re-enable it and restrict        it to specific hosts and ports.

    For the stable distribution (trixie), these problems have been fixed in     version 0.10.1-3.1+deb13u2.

    We recommend that you upgrade your xrdp packages.

    For the detailed security status of xrdp please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/xrdp

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bd0a75766f advisory.

    # Release notes for xrdp v0.10.6.1 (2026/07/06)

    ## General announcements

    This release fixes 10 vulnerabilities and 1 regression introduced by a vulnerability fix in the previous     release.

    If you like xrdp, please consider sponsoring or donating to the project. We accept financial contributions     through Open Collective, and direct donations to individual developers via GitHub Sponsors are also     welcome.

    ## Security fixes

    - CVE-2026-41252
    - CVE-2026-41521
    - CVE-2026-44178
    - CVE-2026-42218
    - CVE-2026-44978
    - CVE-2026-54538
    - CVE-2026-55238
    - CVE-2026-55626
    - CVE-2026-55639
    - CVE-2026-55645

    ## New features

    - None

    ## Bug fixes

    - regression: Fix SEGV in xrdp when running over TLS (#3793)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a3a34818-79a0-11f1-b295-98b78501ef2a advisory.

    xrdp projects reports:
    xrdp v0.10.6.1 fixes 10 vulnerabilities and 1 regression introduced             by a vulnerability fix in the previous release.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4759 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4759-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Abhijith PA     August 29, 2026                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : xrdp     Version        : 0.9.21.1-1~deb11u4 0.9.21.1-1+deb12u3     CVE ID         : CVE-2026-32105 CVE-2026-32107 CVE-2026-32623 CVE-2026-32624                      CVE-2026-33516 CVE-2026-33689 CVE-2026-41252 CVE-2026-41521                      CVE-2026-44178 CVE-2026-44978 CVE-2026-54538 CVE-2026-55238                      CVE-2026-55639 CVE-2026-55645

    Several vulnerabilities were discovered in xrdp, a Remote Desktop     Protocol (RDP) server.

    CVE-2026-32105

        modify encrypted traffic in transit without detection

    CVE-2026-32107

        improper privilege management allow attacker to escalate         privileges to root and execute arbitrary code.

    CVE-2026-32623

        heap-based buffer overflow vulnerability

    CVE-2026-32624

        heap-based buffer overflow vulnerability

    CVE-2026-33516

        out-of-bounds read vulnerability

    CVE-2026-33689

        out-of-bounds read vulnerability

    CVE-2026-41252

        missing bounds check in xrdp, which allows a heap-based buffer         overflow

    CVE-2026-41521

        integer overflow vulnerability

    CVE-2026-44178

        heap-based buffer overflow vulnerability

    CVE-2026-44978

        heap out-of-bounds read vulnerability

    CVE-2026-54538

        sending a specially crafted packet that forces the process into an         infinite, CPU-bound loop

    CVE-2026-55238

        Denial of Service

    CVE-2026-55639

        exploit by specially crafted RDP malformed data and read         out-of-bound data block.

    CVE-2026-55645

        out-of-bounds memory reads

    For Debian 11 bullseye, these problems have been fixed in version     0.9.21.1-1~deb11u4.

    For Debian 12 bookworm, these problems have been fixed in version     0.9.21.1-1+deb12u3.

    We recommend that you upgrade your xrdp packages.

    For the detailed security status of xrdp please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/xrdp

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which     allows a heap-based buffer overflow when operating in vnc-any mode. The issue occurs during the handling     of RFB protocol color map messages from a VNC server, where incoming color indices are not properly     validated. A malicious VNC server can exploit this flaw by sending crafted messages with out-of-range     values, leading to an out-of-bounds write on the heap. This memory corruption can result in a denial of     service (DoS) or potentially allow remote code execution (RCE) prior to authentication. This issue has     been fixed in version 0.10.6.1. (CVE-2026-41252)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
327219	Fedora 44 : xrdp (2026-05c06fa0a8)	Nessus	Fedora Local Security Checks	7/16/2026	7/23/2026	critical
341057	Debian dsa-6469 : xrdp - security update	Nessus	Debian Local Security Checks	8/27/2026	8/27/2026	critical
327222	Fedora 43 : xrdp (2026-bd0a75766f)	Nessus	Fedora Local Security Checks	7/16/2026	7/23/2026	critical
325494	FreeBSD : xrdp -- multiple vulnerabilities (a3a34818-79a0-11f1-b295-98b78501ef2a)	Nessus	FreeBSD Local Security Checks	7/7/2026	7/23/2026	critical
341538	Debian dla-4759 : xrdp - security update	Nessus	Debian Local Security Checks	8/29/2026	8/29/2026	critical
325638	Linux Distros Unpatched Vulnerability : CVE-2026-41252	Nessus	Misc.	7/8/2026	9/1/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical