CVE-2026-72746

A flaw was found in FreeRDP. An unauthenticated remote attacker could bypass the server-side authentication in the RDSTLS Remote Desktop Services Transport Layer Security handshake. By sending a Capabilities PDU instead of the expected Authentication Request PDU, the server incorrectly processes...

CVE-2026-72746

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73241...

EUVD-2026-56136

FreeRDP before 3.30.0 contains a server-side authentication bypass in the RDSTLS handshake. When a server is configured with RdstlsSecurity = TRUE, the handshake dispatches inbound PDUs based solely on the attacker-supplied wire pduType without verifying that the received PDU is the one required ...

CVE-2026-72746

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-73241...

CVE-2026-72746

CVE-2026-72746 is rejected/withdrawn by the CNA as a duplicate of CVE-2026-73241.

Linux Distros Unpatched Vulnerability : CVE-2026-72746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.30.0 contains a server-side authentication bypass in the RDSTLS handshake. When a server is configured with RdstlsSecurity = TRUE, the handshak...

PT-2026-70159

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.30.0 Description A server-side authentication bypass exists in the RDSTLS handshake when the server is configured with RdstlsSecurity = TRUE. The handshake dispatches inbound PDUs based on the attacker-supplied...